modeswap[.]exe[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

modeswap.exe.7z
Size

59KB
MD5

eb268a9e74998dc3a359ed8a73facd4e
SHA1

042b710f0c3b01288ffdc188a6b6c833fb22c759
SHA256

34181058fbdaf4c9fcb695ef938a04923cf00abcdc9f469f536d6faacd0bf589
SHA512

fdb7ed40c29507578c4db1f6441abceebf9f7a5fb886ade8c55439616e800c09a4391a69139af85093e77ed679e6a04aeeb3f136bb589b065f2e13bb48dc5211
SSDEEP

1536:6/JPap2zKwOjy9YkXukhGx6UNhfa4PdZ2sRdzZ8SN6RY1VK:6/Jip2z0jymkrhGUqVa4Pnld6j

Score

N/A

Malware Config

Signatures

Files

modeswap.exe.7z
.7z

Password: infected
modeswap.exe
.exe windows x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ