b9a929d8393d91dcf9e8b2fe9ff0636ef5f5ca4cb0551222fe26d6308a1bbd1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a929d8393d91dcf9e8b2fe9ff0636ef5f5ca4cb0551222fe26d6308a1bbd1c
Size

449KB
MD5

54971f1951623eced1716a1cfaae4502
SHA1

aa4e5db8d01bdbddbb7738dae87ff53de202496f
SHA256

b9a929d8393d91dcf9e8b2fe9ff0636ef5f5ca4cb0551222fe26d6308a1bbd1c
SHA512

5e1c69bd8f61564af12b0a57817e6da648be8d1c5f6b1759617ea0a3d319b5331758d53e6a720e1eb5fa9a568b8a83b7f86111677ad752d61c895f7f115ad2cb
SSDEEP

12288:sQbYwO6jp8QZPndmETa9cuFyFad3fddDaXWl:LUR6FYETa9xo6ddfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/00472790000252-Swift Advice.exe

Files

b9a929d8393d91dcf9e8b2fe9ff0636ef5f5ca4cb0551222fe26d6308a1bbd1c
.zip
00472790000252-Swift Advice.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 886KB - Virtual size: 886KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ