SWIFT_BJ23004300IU2398385[.]pdf[.]arj

Sharing

Copy URL Twitter E-mail

General

Target
SWIFT_BJ23004300IU2398385.pdf.arj
Size 399KB
Sample231023-e7ba3afh59
SHA256 01e2299e4f97e6d9e8ab10d0dd8ceae140087f96adf700e33a5092fe3ed613b7
MD5 4e6d768c6de5cbba0efcc8b58511b75c
SHA1 91642b34c1ca4537fb68f95451ee4cd3a77b3b1f
SHA512 2dce786df508ee0a44da30dfa4df3fef610e0cd1310f62c8e1da06814a259d748a04fb96a8ece754cb5a3fc1b14e1e1864bbcacbd7f3e45d1d68affb5a598656
SSDEEP 6144:cWZP8vfplmpASL5mMjKmzxWVO/AT5CNlgjHhSr3eQ3z4/OtCnKV/DlO+0bzr3oZD:cT3plmNIU0O4AMBSbHRCGxO+q3Mr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIFT_BJ23004300IU2398385.pdf.exe

File Explorer

SWIFT_BJ23004300IU2398385.pdf.arj

.rar 399KB
SWIFT_BJ23004300IU2398385.pdf.exe

.exe 426KB

SWIFT_BJ23004300IU2398385.pdf.arj

SHA256 01e2299e4f97e6d9e8ab10d0dd8ceae140087f96adf700e33a5092fe3ed613b7
MD5 4e6d768c6de5cbba0efcc8b58511b75c
SHA1 91642b34c1ca4537fb68f95451ee4cd3a77b3b1f
SHA512 2dce786df508ee0a44da30dfa4df3fef610e0cd1310f62c8e1da06814a259d748a04fb96a8ece754cb5a3fc1b14e1e1864bbcacbd7f3e45d1d68affb5a598656
SSDEEP 6144:cWZP8vfplmpASL5mMjKmzxWVO/AT5CNlgjHhSr3eQ3z4/OtCnKV/DlO+0bzr3oZD:cT3plmNIU0O4AMBSbHRCGxO+q3Mr
MD5 SHA1 SHA512 SSDEEP

SWIFT_BJ23004300IU2398385.pdf.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 fff1dacdf63f9d7d618c930f304a119d24fd3592eab317e988b208ad8819517f
MD5 32da6e72c3efd2d3242c8e49ba196303
SHA1 921978e022ace201a67e3bd29ce5efda33f3c391
SHA512 5a27b0eb40f2681eb26c781433c36ce50d81dce1fe8c549944aa49985b01bf5a637f503bfd02936e0991525882a03a36b5f238aa5758477cae62f5d8c2705687
SSDEEP 12288:zfLCxmUNqIg3XFhiR44O7lEJLbGQCVjxdrCcn:zfLC8U0IsF14O7+ZGJd2cn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW