Swift copy 0000289001[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swift copy 0000289001.exe
Size

841KB
MD5

a142794d45a706277ccfde6ed8d0eeb2
SHA1

692bb9e96810676a1cebe68817d6fdc1cbeefe0a
SHA256

905525d5359d6c9a8651f5cc6cf8d7e64bed0d3384867b6c98c6a2b6f0364d2c
SHA512

a725b72505556674188142282045f27e1d3d0817efc688cf8df959d80526eb0ccb6fc66b25bec92dd11e1d91e5f508476bec0189428eb2456e0d7d2f550f3371
SSDEEP

12288:fMkfEu5Ts7ZFnXGfKzz32LH3MIL09bJ12ZneI4lKFYHjOhhb7FG69tTE:07znx7E3MILwto5eI4lqsy/E69tTE

Score

N/A

Malware Config

Signatures

Files

Swift copy 0000289001.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 839KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ