COPIA DE PAGO SWIFT[.]exe | Triage

Sharing

General

Target

COPIA DE PAGO SWIFT.exe
Size

650KB
MD5

59a4f850157ca5ce9e8229510552d433
SHA1

699d609cdc0b19fd1a83ae89ce5de8f01a853af8
SHA256

d42df773a5031e58adb497c874fcf6d5b723aaf6eadd29283a834a08d9cf712d
SHA512

669e3cfb38def3195307a496a3f5f998f9b4e04d6719b0c5f5ef5328169ff07e2bf9edec954bbd72a2e0ae8723167137a4d8daf1a45131e5c5794c3485d11680
SSDEEP

12288:DaAvgzT370vptqK3DNol90+VSNXKY79gcr+zgP8hTnWIzLaMV:pxFov2XK89gc+TWXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
COPIA DE PAGO SWIFT.exe

Files

COPIA DE PAGO SWIFT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ