Swift Cfoc 00109839[.]zip | Triage

Sharing

General

Target

Swift Cfoc 00109839.zip
Size

476KB
MD5

60f1d7ec562490c276e0b9a8ee392ce9
SHA1

9b1893dabc419c1e5c7272e7087df175f498f5ea
SHA256

5671e8620e226434a8fb98ffcf9f9ea1483c809b774f532453d650a412795cd4
SHA512

af4adb2ba3680c181f0cdcae49a940b4b3f6336d78a532adb81ad1c78d028b559aa940bdab27e528282d83d28e4ebc9278cd3525f356e9a33c53e8a6cec3a25b
SSDEEP

12288:Pqs9T1guN7pTpyawZXNVrr7hpZq3apq5ZLy6VncpW1OV3F8d:hhNFpJwZ7Fpq5ZLPVWW1eS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cfoc 00109839.exe

Files

Swift Cfoc 00109839.zip
.zip
Cfoc 00109839.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ