Swift_payment_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Swift_payment_pdf.exe
Size

778KB
MD5

3084fdd7cdc7c90b0a2ace4d60203296
SHA1

5faffde24e58a360f94150b34a092421195e6657
SHA256

8c57fbd466e5026289d1c56bfbd9a09979f3ef516b318318dcd4ef9a8119f4f8
SHA512

567e8190f0ce1e54b8017d4c7db3e335d020df029876793036d29110293bbc70cffb0921c9b6348b94e87e2481bdd90615621cb3462bf7fb984ec14e76e05a5f
SSDEEP

12288:ouKW6JNf+wpMrZSMRjkvCZ0hFVBZC9sSx6OhiamF4tUljfYRoNWWNCyej6O6x2Dx:8JqARzpC9sQ/cjWWk7jgW9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swift_payment_pdf.exe

Files

Swift_payment_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ