SWIFT_MESSAGE_8100902281[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SWIFT_MESSAGE_8100902281.exe
Size

1.1MB
MD5

c9cf391d90881f5d0726e6d530a08525
SHA1

2bd2befef792717504e44f050594691c549aa7ba
SHA256

1b06a2398764f23e43dd171d49500cdaa3251ea195ce2c6fc4dfc1067955bf3e
SHA512

ab1e1d3a166b4bb5e54c0d1b242d459af95b33116fb1b36861d740376ced21bfa58d92da60b115b7e1ea320acaa942bc12da39013653d435e89155a939647357
SSDEEP

24576:IUBwhnVCgtrDtYsi9nj2kErLHe4UUSKAWrVfpCPy+D+jBz:bwhno0Osi9j2kErrBU2hpCPy+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SWIFT_MESSAGE_8100902281.exe

Files

SWIFT_MESSAGE_8100902281.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 950KB - Virtual size: 949KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ