Bank Swift[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bank Swift.exe
Size

1.2MB
MD5

aaea6cf42726217d2ad73028dd781478
SHA1

7da9bf7a71246dffc089f8186c5a0912e0a70fd8
SHA256

80e12c2425ec7b8aa8913df82bd47c0c1a62f6539df22b6bf1ddab8b1694e3e8
SHA512

d4f7d2d5f2554e6b9caae87002eaaf6d33a58609bed21468699f8f8317f508d1668269c05acb8f805ce7b1f967a66ca430206c8ca1f39e5adaa016a7191fdc56
SSDEEP

12288:PnaPjK9IBlnj0T94KxKNBNkCVr5B8TdtGUy+dXUixJCbBghM/Oy+4Oi+4hfKRzrt:PnaPDZYT9sS61ijy7KNrkntJ3cNkW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bank Swift.exe

Files

Bank Swift.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ