SWIFT DOCUMENT[.]exe | Triage

Sharing

General

Target

SWIFT DOCUMENT.exe
Size

765KB
MD5

1f788b0b1a81a2fc1dca82ac73f743fe
SHA1

42a69d3ad4c00a48caf35d0128a0a233599f254f
SHA256

860bda507891cdc32d478e52513a19e20f50bb104275c46fd1ce797d83acf908
SHA512

d54df096ddc3e4369d1a20dddc1bb169c4643a5b23e809e7dd03a0f32ff3017d74ce17d65b5ba7c10a7754f0f6465338aa3c1eed63850d1165686ddaa76f26df
SSDEEP

12288:oZnDxtz91GdtGGEyT6JHellNeGCb9YDOb5SgsE91tpmrRaukYvtas7:o3tJsr/6J+DwRyO5SgF9TpmtaPYvtas

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SWIFT DOCUMENT.exe

Files

SWIFT DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 760KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ