03062024_1440_03062024_SWIF_930[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03062024_1440_03062024_SWIF_930.rar
Size

636KB
MD5

3230226ee7ae3ade130b6f8ec4342c6a
SHA1

8d85ebcc54a645c7067abed1648fa5c16e5370f6
SHA256

ce30b6bc4ab4bab38e5e38b431e83db87e13bff7c247dd975d9edb428e27f83b
SHA512

0aa069a417dd006291e9b801b94deb1bc97ab444a304edf22f1f3cf437589f6a297a4b9ce4261a5272a71c2283cc369e5052b1b98566e8b8f29d1d59e2195bd2
SSDEEP

12288:9jbmByMwYLlNYF7Em9NBuwFOHwYjPeVcy+tofX8I3y+wpOnHtC6gAAxwVIM:hSQp8q6m9NBuw8w+eVckP8d+wUtTuCIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIF_930.exe

Files

03062024_1440_03062024_SWIF_930.rar
.rar

Password: infected
SWIF_930.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cxtw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ