Swift Mesajı[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swift Mesajı.exe
Size

1.0MB
MD5

c49caba15f660fcc30d4e36841d7ea52
SHA1

41c4f74355b1bf8a453f65635deb088e75e9ae4d
SHA256

0adef78d93aefbf2868d22e5e63265cc574c7fea255e903c0a8e936586ddaf1f
SHA512

8536e3b9457121a2bd14e834437d387d29ace917734f81082b53b6f46144b9961a6f3b79b5a57e464f8c64d12708a9859b359be9416bfd87b9516f105aac2143
SSDEEP

24576:i1U9BqmycgiH75BKguJBytJBayxm/miYHwY02WJ:iu9Bqmycr7KguJBkJB8+iS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swift Mesajı.exe

Files

Swift Mesajı.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ