SWIFT Transfer_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SWIFT Transfer_pdf.exe
Size

602KB
MD5

27fa15cef4d1652cd043e511a90b398a
SHA1

c2dc60573948d4344fed72917a41a1ad2f38b685
SHA256

cc33d45bc5abe85f10d31bba76fcf5f4a8f4e48a329fc2fc931bbfc4e8223fae
SHA512

f18644e3409c47d9d4d211d6b3c31353220273b2f684cc6e76a3e5d54aaff24a29eb1e1dcbbe46dd4c2b19ed7d3282abf4aa54ed3e8aad1691386810b0701512
SSDEEP

12288:jyWO+opbKbf/ehYIeu4pP3hGCGym+Z97ePfjFng:mWObK7eC84R3wCEm2xg

Score

N/A

Malware Config

Signatures

Files

SWIFT Transfer_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ