swift[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

swift.exe
Size

740KB
MD5

018ffd0a27e6516a47d04f9b3c5bdd3f
SHA1

442bcecb8a50905472efd5b6fbe6192ab08f0c73
SHA256

40c5a3fcc214c1458b2540d2f5bea07a0cddd0995dfafff23cbdee8d6f422d2e
SHA512

be737e956f96550bca1b4db93b41bbf1dd742260841f371f8b62d507137a97d10d65fa1a3a6106a35820cb947efd3995ef6883760fe6a58120ac47d7f33c799a
SSDEEP

12288:JNdL6yiRJU/WcfnOycRxozzY/UPYBd9wBy9kzFY6gnvDZo+sc+e76m8m++afQmYy:vJBFeKO9xov6sYv2ByoY6K8Jm++l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift.exe

Files

swift.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 738KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ