RE SWIFT DOZNAKA 1 pdf[.]exe | Triage

Sharing

General

Target

RE SWIFT DOZNAKA 1 pdf.exe
Size

1.2MB
MD5

96c304685994e3191e40a493f10d80a6
SHA1

c4096ef0e18d73266c7df284e42254674540d96b
SHA256

297022aace9eedb2bff66cc4178d7961265e2b6e592cb65a03e6854a5bcfb02d
SHA512

d466725a34edec20d8f5beb6746c3d9f4a2ea157b1190cf3f3a60e714b2d8fb5c243b2fb6bf98b86ea32032c93bd6d09b438078a60c57be2cf8356a47484a561
SSDEEP

24576:z523xyh3kk9HfhFnDOoLc4KDbm3DVBAB:U383kk/xG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RE SWIFT DOZNAKA 1 pdf.exe

Files

RE SWIFT DOZNAKA 1 pdf.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 860KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ