TT Swift code-pdf[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TT Swift code-pdf.bat
Size

910KB
MD5

f7ebf594b27b6a810a5f46c03f456e28
SHA1

d23c7220d3745a754a58a9ad7ab288462ce49402
SHA256

d376584a3e0c1ee80f549aff9fbdc8ec49ef64feccc08c04ec19251b882d1efc
SHA512

e2a9be18d00b1b53dce3d7c19314742f66bd9c464e526a14fc39c90b0468e4e24589a3d57ea0175044b85f1768da91563263865c908ce68aa348d8be2e303983
SSDEEP

24576:dUxh6exZTlCPV3u9dT15TVBNMbr3UsjGPgjyDGl:dI9oPAdT15TXNMbrk7ND2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TT Swift code.exe

Files

TT Swift code-pdf.bat
.rar
TT Swift code.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ