z1MT103SWIFTCOPY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z1MT103SWIFTCOPY.exe
Size

578KB
MD5

c1ab6de5fc136f64db5f5c8227b50a2d
SHA1

b27a34429472a58c9a84d11b124008efbce5f777
SHA256

0aea55a753fc5e090556cab151517684fc4526f2fdf65523abea2853ad11ba3c
SHA512

d94d2773757b60a4bead56727779616f77c2d472670912b153c24fd58f8e76e1582e52f51126a4cf26a2157e72cc4dac33e8eca1c2cac9c5bd0ee71551ca171c
SSDEEP

12288:pm+tks6hSeClNDZiDZ9mhGMsIrDik5P8J/20pVZipvb:nKCFNDZefpMsCeIPI/HI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z1MT103SWIFTCOPY.exe

Files

z1MT103SWIFTCOPY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ