deb01e98ce79a5f3d0cf4e4ed2abea23225c5bfad0c452bc07876fea81c8e631 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

deb01e98ce79a5f3d0cf4e4ed2abea23225c5bfad0c452bc07876fea81c8e631
Size

631KB
MD5

8d38417dd51b6f7c625c6cf0b5b1c9b4
SHA1

5c8f9d768d96bb68e7a2c866bea69056be2eec80
SHA256

deb01e98ce79a5f3d0cf4e4ed2abea23225c5bfad0c452bc07876fea81c8e631
SHA512

177a93e45cfcb8ec695d63761bea96107f269ceb25ecc44c8bda391b3eaa0d859d9019f729ebf9cf760cf247ddfa3ae292f0dc34199040559e966076e09a13d9
SSDEEP

12288:5EoVKVB9C9pbymOaYEs3xe8WtZEoNL2DJ4wnmHXwrtyMBV1P58jOI8DluWQ:5dV/pzOfBe8WJNKdawrtyo1B8jOIN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIFT COPY.exe

Files

deb01e98ce79a5f3d0cf4e4ed2abea23225c5bfad0c452bc07876fea81c8e631
.zip
SWIFT COPY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pEdX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ