Payment-Swift_Copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment-Swift_Copy.exe
Size

667KB
MD5

1992f8345c8772a79c6440b150e70f97
SHA1

72eea966c2f8392fd3a9738badf78e3529435546
SHA256

59bfb982d029cacbcb298fb5f5cd32d30a4420c92cca120304e144aad3608068
SHA512

97b4e6b319b96f816ecd332a65b23cefc142974ac53e0f61a5f6b2b7e173f3f203952fbab50e927e16484d4fbcb714ea3c80a179de9c56e548f81d849bac84af
SSDEEP

12288:F/mAXPffIF8L2WYSehZoDkQFLTonjzVSAuCcufifkpTCrAfnZTLXxM2CDU6Vk:F/zHgF8/iyww8jA3YnfnRFMRDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payment-Swift_Copy.exe

Files

Payment-Swift_Copy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ