Static task
static1
Behavioral task
behavioral1
Sample
SWIFT- Ref Details Y373N 379AH 5A9 AT46T9 F037AG 3U3S7 A084uh 0JS SASR8382.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SWIFT- Ref Details Y373N 379AH 5A9 AT46T9 F037AG 3U3S7 A084uh 0JS SASR8382.exe
Resource
win10v2004-20231023-en
General
-
Target
SWIFT- Ref Details Y373N 379AH 5A9 AT46T9 F037AG 3U3S7 A084uh 0JS SASR8382.exe
-
Size
294KB
-
MD5
cd4cdc780c8173e1892fafa8f7475a57
-
SHA1
261f7ff400689603c94b49ecde5866336054bcb0
-
SHA256
208c074fc787dd69e23e82c508cc982bfa82ef2fc226c592d7bb0ab1bc75c165
-
SHA512
0d78c2e3c3c38f62ed1a93051e08c54233216c4af1a0c35800a2ffd405d9e6fcbeb43d23fa0a3f2396a1ccdad40a1ed4ab6214a4653c52d88d5100c12b4a1e2e
-
SSDEEP
3072:rd7waArolgirUoEOpARFZIfbCM+R9Mdl5qAFfXI5gIVw0GMcVZqVFtt3Fulk0NnV:rd7V+YTrUoEgEW9fIVRcVZqzCv5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFT- Ref Details Y373N 379AH 5A9 AT46T9 F037AG 3U3S7 A084uh 0JS SASR8382.exe
Files
-
SWIFT- Ref Details Y373N 379AH 5A9 AT46T9 F037AG 3U3S7 A084uh 0JS SASR8382.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ