Swift Copy[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swift Copy.img
Size

1.2MB
MD5

9a5f01ba12e7ff16febb3265449b3ec3
SHA1

17e3f8b55f6961d7b0c1bc5c935ea5ccab8b8e3f
SHA256

94e3e60a03b74442820366a8d305cb56e562a720aa520489169a45811a26cec7
SHA512

ba3ba6dfd819504cc11d81e808b23b9d577602317fc7b359699b7ef488040e8ac337dee332b3adec42402e11386918baec9b8a9e1a8ca5cfe318ec41c3fc2533
SSDEEP

12288:vt0X9Ka6VzOVorbIhwys9S1UAn3ej4buCo+U/OEe6Ft:vt0txwzqebUUA3ejIGGp6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIFT_CO.EXE

Files

Swift Copy.img
.iso
SWIFT_CO.EXE
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ