Swift Copy_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swift Copy_pdf.exe
Size

684KB
MD5

0a1247f58a7b4a39f799b231f7228632
SHA1

880a6c78967b3eb9b3635ce50765f43243960acf
SHA256

269e0464214adee11c3339c18062ab56d83d34e745f2809ff35de0bd1ba62bc2
SHA512

0acb68a9fd0d0e16356aa1aeffe4dd92cc12dd97b59967bc4cbd3a06cf191038bc5098084af33abb5efc64a553625f52789526b65b00b50eb7a578a0fa5a0901
SSDEEP

12288:K99glh04bCaw/V//+54k5m0EUyX0OMXhHsS/poMJNf6RlZVvG1p4vB6Oe6N3wiG7:Kcw/Vj/5UPPGqjJNwlnvmG3wiGuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swift Copy_pdf.exe

Files

Swift Copy_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

lhUU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ