Static task
static1
Behavioral task
behavioral1
Sample
SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.exe
Resource
win10v2004-20240709-en
General
-
Target
26072024_1147_26072024_SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.gz
-
Size
669KB
-
MD5
54049cb9598fbbf5d8693b707f686310
-
SHA1
2975c6ac10be64fc2b5fc2467fa1ed4e86f79523
-
SHA256
76c98f0c27130e959a7e0e465e3df5b08727a09521e64bbe5f621cd524a3f433
-
SHA512
ce6f5ca5a4e4be3bee6e08141ede62b8bbbb8444c6d40ee61ffe648d7572021cad49eb2db5278f82576dbad455a709406c301d0e4ff9de49718b8cd460806ffa
-
SSDEEP
12288:36kWLukbu6lxaRD7dqESmMKiqztVrCr/8z0Jb3akyVOfj1JXBap:bWLRi7PSmMKhpBCr0wJ+LOfj1JXBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.exe
Files
-
26072024_1147_26072024_SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.gz.rar
Password: infected
-
SWIFT SERVISDRAGAN DOOEL EUR 31258.55 20240725100124.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ