CODICEXSWIFT[.]001[.]rar

General

Target
CODICEXSWIFT.001.rar
Size 1016KB
Sample260724-p3wrbaem4v
SHA256 e91218a965553eb3368ce7d6e1007804d09aae93fa2ffe0c53d709606fcc47c8
MD5 df174bc33c05ee717d504c80a66d3f38
SHA1 b4818b785e1b989c415c1fbb7d4f89d5ad11cce5
SHA512 1360cfbac7c3c414a3386265f8ed84f9f65d8c92af4bc35d4865b4a925f2648d384b94d98c5e3a7319db6fdc247970ad219cadfb068f9c63de93e53ded3cf74f
SSDEEP 24576:dUrmkgV9qOl2kho10PGpTgizeliNXUAYjdySvQ1V8G4eiAJUeSo:dUrmkBiO0Sg2el26j7I38veiO
TLSH
T1402523A9ECA4E8E1D0D9FF6E199622DE638CE6203C095FF5315B078974A8A30750C1DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CODICE SWIFT.exe

File Explorer

CODICEXSWIFT.001.rar

.rar 1016KB
CODICE SWIFT.exe

.exe 1.1MB

CODICEXSWIFT.001.rar

SHA256 e91218a965553eb3368ce7d6e1007804d09aae93fa2ffe0c53d709606fcc47c8
MD5 df174bc33c05ee717d504c80a66d3f38
SHA1 b4818b785e1b989c415c1fbb7d4f89d5ad11cce5
SHA512 1360cfbac7c3c414a3386265f8ed84f9f65d8c92af4bc35d4865b4a925f2648d384b94d98c5e3a7319db6fdc247970ad219cadfb068f9c63de93e53ded3cf74f
SSDEEP 24576:dUrmkgV9qOl2kho10PGpTgizeliNXUAYjdySvQ1V8G4eiAJUeSo:dUrmkBiO0Sg2el26j7I38veiO
TLSH
T1402523A9ECA4E8E1D0D9FF6E199622DE638CE6203C095FF5315B078974A8A30750C1DF
MD5 SHA1 SHA512 SSDEEP TLSH

CODICE SWIFT.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f10a3669a6a50dbf030646ffc0e2aceab6a779d76d2a768fb7f613088549f268
MD5 6ac1ab7fb937d122fb238bc0c8f71f9b
SHA1 fbf5db37ea8692dbf4725127409f47769109a449
SHA512 cd5b2ca9fc7a96cff529d738249b11fc854b683d472f79bb1e25ef2a00f319180bfca40a26f6c5189126f29b330fd4367e546e6da2b5d57ff7256b44e00eb35e
SSDEEP 24576:yOjR6pFsRQZEY+8jQ92h7QjXhzscVRGNnvZ76JIu4GNhwwkq3Y5:TtimRKEYjAa7QeeR8BG+Xvd
TLSH
T19A350244235BD802CA931FB55E70E37401A95EC4E815E373CAFA7DABF87E3823915296
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1138042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\cRFXmXVOqu\src\obj\Debug\gmRT.pdb

CODICEXSWIFT.001.rar

CODICE SWIFT.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

CODICEXSWIFT.001.rar

CODICE SWIFT.exe

mscoree

dotnet