Static task
static1
Behavioral task
behavioral1
Sample
Swg000100 remittance_ 100% Pre-payment.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Swg000100 remittance_ 100% Pre-payment.exe
Resource
win10v2004-20231023-en
General
-
Target
Swg000100 remittance_ 100% Pre-payment.exe
-
Size
1.1MB
-
MD5
5bee592fd00b3f3a81aae7b5731c64e3
-
SHA1
b79b92e0897f51bc789f2485c23cd03986700074
-
SHA256
4da6365d418ffcdd935ceb67deb6bee4dc21f70d040498eff6989e17e0fbfc39
-
SHA512
1df6afaa3b2ae266e99aee24df03eb75289da071ae2ca2781356e0ddbb2a76af0807b732d3349d880b90ca70d3baebd5377b664074f8364e665e1851ce1a5945
-
SSDEEP
24576:5hR/42y6+tSf9cQIXqccLtQm731+7cnt+oJXsr/MBaNx2LOicq:xw2yHE9crYLOmc7q+yXFLOi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Swg000100 remittance_ 100% Pre-payment.exe
Files
-
Swg000100 remittance_ 100% Pre-payment.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ