payment_swift[.]exe | Triage

Sharing

General

Target

payment_swift.exe
Size

688KB
MD5

a09a723a238ef891b41f44249dd607a6
SHA1

8271a1b3fd3f1343c8cadbc975e0b9c986517936
SHA256

b85378cb9d057f26f202448043d2b863114d4833dee228c933f677ffe69da6fe
SHA512

866f667392321d128bc0004ddecf02de2ab298daa0a7ca6be34165bf793f22d84fa67597b8e3c09157c9df65775dc4f36d517ae33a686494d58bcfe6c60a04f3
SSDEEP

12288:33ot7HOC8xfA7o1NgT6Kw56CCbrllx631+TlC92e+4AmQmbCp:33+j58xfW2M701+ZQ2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payment_swift.exe

Files

payment_swift.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ