swift mesaji_PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

swift mesaji_PDF.exe
Size

761KB
MD5

aa058eb119a4173cc235beadd3355951
SHA1

eda0e844972090d3e57596267389c1a59558d7a2
SHA256

5c76a96da653327e6693cf7b0cd13af04dccdc8cab2692fdb707b293c197c2ee
SHA512

2bc5bbd4f37f64c66e11bf86eee74640828c937ef1e0ba1955f1c7d4cdcae4851d15befa38b4f6a978d06f498685f5c8165c1abc58f033e4173e25cd54ef5e7f
SSDEEP

12288:H51Qn0QNy/SJN1l4H2JKTS/KAO4x8PhBP3AE/d09VIGe1NQcQoOrDA45HYsxqpO8:Z00QNeKN1lvMwKyxwjPPF8+vMHFx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift mesaji_PDF.exe

Files

swift mesaji_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 734KB - Virtual size: 734KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ