f82f098c35a17e642c24ff2e93a1f83a0731c3bd63619ff11c3923d3d35d6111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82f098c35a17e642c24ff2e93a1f83a0731c3bd63619ff11c3923d3d35d6111
Size

543KB
MD5

5cdf7070433baf4e4e5f59a729c049be
SHA1

e47fa4a8b32ba730ed1d5230d7a949b9399fca4e
SHA256

f82f098c35a17e642c24ff2e93a1f83a0731c3bd63619ff11c3923d3d35d6111
SHA512

aebc025bf2a6c6d4495421aad1905109c71f7b78a9e7723c6c729c3950744345fd9af2d180a8b074b402d6bc0f91673e4c33333b5c13632b8209ec5a3ff6475c
SSDEEP

12288:lW0NP9ibvT1gsjQp9aYH9RkmK75CVNA4udNdv8mq:sPT1gsjQpoDmGCVN7uxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Swift.exe

Files

f82f098c35a17e642c24ff2e93a1f83a0731c3bd63619ff11c3923d3d35d6111
.zip
Swift.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ