SWIFT-PYT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SWIFT-PYT.exe
Size

703KB
MD5

7a3b4c2b8b9ed8203593f7328f91090e
SHA1

26b2a51297e9e2ad8d92020d410697edcc579d40
SHA256

6e16099753d809e006abe6043a541721c385030cbcd92adb912f35819f7f265e
SHA512

e026c7b88b03cddfa920f7a698d9a818e8a8081893d7991b89d7c6c7c3c17131106aeb49c3848fad419ed3eb1535886fb83d8cbf7e68fe652c487bb162a4c256
SSDEEP

12288:G3IU8S6eUdu8BnBQpLk5YlmCyl0Focj+gW5BFxEA8CWE5:8ItSAdu8tCr2yFow+D/F0y5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SWIFT-PYT.exe

Files

SWIFT-PYT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ