Overview

overview

10

Static

static

3

SWIFT103 712022.exe

windows7-x64

10

SWIFT103 712022.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7e4d84d36889148970a14fd723088957130ba31453d1f43f0763468d88b2e0d8

  • Size

    414KB

  • MD5

    33435d2a5a69b19f87fc93bec7cfb8d8

  • SHA1

    8f0f2d861337f3d5d43216131a87c83e6cbee217

  • SHA256

    7e4d84d36889148970a14fd723088957130ba31453d1f43f0763468d88b2e0d8

  • SHA512

    7b9f1b4b92805183689c86ffdfa009169f2c5026ac00cbef83388d1daceb1225db510c1724a727c88160eda06d3a6b3c92b8468161e472f288540f9e23e7718f

  • SSDEEP

    12288:8Br7VkNA+O69EQsgqIsgaKdMWuS447zno:8Br8A+Om76G7tzo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7e4d84d36889148970a14fd723088957130ba31453d1f43f0763468d88b2e0d8
    .zip

    Password: infected

  • ProgramData/McAfee/QuarMeta/32f0131b-5ead-4303-8ed2-2dd072d07c63
    .xml
  • Users/u44102/Documents/New folder/PHISHINGVirus trojan.trdropper.msil.gen EXTERNO Pago TRANSFERENCIA BANCARIA.msg
    .msg

    • http://sos94.com

    • http://sos94.com/Briefcase/image001.jpg

  • SWIFT103 712022.zip
    .zip
  • SWIFT103 712022.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections