694b5de45c8b578c41fc102709d64e5651fb81f2fdc0a2ff388eaeb7c4997ab2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694b5de45c8b578c41fc102709d64e5651fb81f2fdc0a2ff388eaeb7c4997ab2
Size

302KB
MD5

359326a94fd72947ba6327f0537f0f4b
SHA1

4faf50ae5eaaab14009529ddfc93f0484d634d5b
SHA256

694b5de45c8b578c41fc102709d64e5651fb81f2fdc0a2ff388eaeb7c4997ab2
SHA512

7d2f491719f6ab4f6f17aed6f9b833aba95715401a438dbf8e583ba49138a792a9b78cd75dcf9d7bcf9ed8acd488e637175fb9f45aedb99f0ef3eb0d538c6360
SSDEEP

6144:X43fnl/OQTl1qEnjrY3XZpeNAq6bneFQEzGyUxjMEpW:oPl/pJ1zjc2NAqInGGyUBMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Returned Payment MT103 Swift.exe

Files

694b5de45c8b578c41fc102709d64e5651fb81f2fdc0a2ff388eaeb7c4997ab2
.zip
Returned Payment MT103 Swift.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ