SWIFT COPY USD$21000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SWIFT COPY USD$21000.exe
Size

1005KB
MD5

d462329ca9e503c4ccd8779d88fe78f0
SHA1

1fb579069bd4476d4446e222dda51c271115c6b7
SHA256

3c195bad1c161c6ebd46ee36002344a8ea77fa2b3b5db15e985429d9f6949cc5
SHA512

ef50f6505f1fdd86cd6caf2ede8b48ad32429e313ea120607c6dd1e93fcd563bd7425767b1b871b9ebf39afef841f0deabea21f675ad789f935b2a4127c8da77
SSDEEP

12288:7f/kKSWr1drzhml5TMm+KO93Jxg2U+p/xkNkkB:7kL61dzc5BK3c2xaB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SWIFT COPY USD$21000.exe

Files

SWIFT COPY USD$21000.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 999KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ