swo[.]exe | Triage

Sharing

General

Target

swo.exe
Size

765KB
MD5

8f4f98c339659ea38113ad5e94ede789
SHA1

7b74182308aec51febdf17e596727e7e1ea1f55b
SHA256

28c4e1d6f79db8b5343fb42f8a7017709257765ac53274c3289c976650a08142
SHA512

12d2750f4a8152ab78aec979efd93f11b361229cc033dba789e3bb8fbfb13fe5d3ed2e8ee61e0f5b2c35c5a10c983871e1dd6e092fc6b74bc6d0b5fde45846a4
SSDEEP

12288:5Nk3yhlzZjIrUM0xTFd4QlgwGAoj4zzeKdi:57zz6rUM4FdjGUoj4zaKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swo.exe

Files

swo.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 762KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ