Swiftsend-084_29042024_pdf_1[.]img | Triage

Sharing

General

Target

Swiftsend-084_29042024_pdf_1.img
Size

1.2MB
MD5

231ff6478230f8f2b28eecfec9ab901c
SHA1

f393456b1086bf9794f0c899333788b372da1322
SHA256

a6ebe5502b666ef55ff9dc168ce6c2e7cd72ee350b9d526713cef91b779afe9d
SHA512

edf5f4c4aea5488483f0a88d642f57263e578512b221b962b0b584ae59b603ea5743e45b9d1cf8ae084c1f9bd5bcfa91c912bc7c64fa33d4b2db72d3f7c43d98
SSDEEP

12288:44OB778QbN5vI3vIXpeFIJMTzfSmzQy3kymdJTRD1iKNDsreh5DSqiUNeGSggAU:FOBNN5QAZHJozSyC9PDX5WaXVU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack002/cXPFfk0pBp7bEsb.pif

Files

Swiftsend-084_29042024_pdf_1.img
.iso
out.iso
.iso
cXPFfk0pBp7bEsb.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ