Static task
static1
Behavioral task
behavioral1
Sample
eurdvswiftsend_30082315823613_pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
eurdvswiftsend_30082315823613_pdf.exe
Resource
win10v2004-20230831-en
General
-
Target
eurdvswiftsend_30082315823613_pdf.exe
-
Size
659KB
-
MD5
a9c1c56a42de4df874d9faefa5e8b14a
-
SHA1
835b27ae359dc86c133748de9e1a00be7f7167ad
-
SHA256
631c44548b7bc8c13c2a2025275f90842523dacd60046eeabea9c3da8d20c926
-
SHA512
d4525fe8e7ede099f11cf8f17736cf02a34ff8b40f6d324d0a5ec616ef2e75307e84a0b95ebb363fef7ea5633f653240e84d8be00faf16804bac9d50fe60e76a
-
SSDEEP
12288:2JfOZ1734F6vh9rLMPQu0VXjEw4PJn+wH4AtY4DwP9FHCKuSzdJG:uWZBE659roPd0NT4PpP4A64G9sQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eurdvswiftsend_30082315823613_pdf.exe
Files
-
eurdvswiftsend_30082315823613_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ