PAYMWNT SWIFT COPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PAYMWNT SWIFT COPY.exe
Size

1.0MB
MD5

776a5c0525fe011b169bfcb667245940
SHA1

9fef7842aafa91725915bc7b9736f6ed97683c8c
SHA256

bd4fea117a02c696dfe0569ae5493b91f6708da188cb314e671bf39ee6361c37
SHA512

ed0ff1124806d8ff32013bb09e92d271ca634004319dc80c38780fbb6f6069c50a39c7c1cd505260bd7822b5258bbc19898f35dd1807dd642ca5bef383662fcb
SSDEEP

12288:IwvNhd7dt5VyWY9xRAta8xIQU3js4dx6Qam6bBADqjJ5npSCSqG5xqjOSJc2i7HC:P97dtijZ8KQUBdx6Qafxjrp5

Score

N/A

Malware Config

Signatures

Files

PAYMWNT SWIFT COPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ