swift[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

swift.exe
Size

694KB
MD5

7fdfab5f85b0db2bf3c7ebbca1f70b16
SHA1

6abc81c66abc245d292d8d25f42067f48d245620
SHA256

ab52f0c80f1cadd45bc294837d320b50854ae4937b1a0eb85e88bfde8f95da23
SHA512

29f150974e2aaeb13334f867b974009b3284f4d45067f720330ce47352ef1409b6b62969e9f24ef5ffb52f245d2f51c8e21be4956aee7b6fca59380f60b1e329
SSDEEP

12288:yf2iN4yiRJU/WcvEZBOziN3rMop2s1apt7XwFh26MdsF9wwpHs2bj4:yf19FeLOziN3rMg8T7XwFh26MTwpM2bc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift.exe

Files

swift.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ