rMensajeSwiftUSD20[.]897[.]64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rMensajeSwiftUSD20.897.64.exe
Size

881KB
MD5

d71827cf1ad8e2e2259072ccebe8d3ed
SHA1

257dad72d87a143db3527ef36a99d4789d3aa22a
SHA256

ac3cd179681e4adb9275878fc688bd47554c835526a1560dd642371b12ed2ff4
SHA512

9a75565daae9f60cc886487c58107cd1ad8e1476f4b9f1b0312111696aeb3bc028d5646085861ed6f50acbd5ff7d64daa4f3010d729cfae7c9803f5ec09a43f3
SSDEEP

12288:NJMbUqwi/iWsjdzFq+zlhe6LN1y4YjlbQiCN3r8L3+46:P3qwiiWDclh5BrilbQiCWD+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rMensajeSwiftUSD20.897.64.exe

Files

rMensajeSwiftUSD20.897.64.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 871KB - Virtual size: 870KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ