SWIFT_PDF[.]exe | Triage

Sharing

General

Target

SWIFT_PDF.exe
Size

908KB
MD5

101a0df83daf8836f9bf996d72c4c6a9
SHA1

c778e9a0ff2dab0404cf84ac4db2139aa4d2b000
SHA256

700abeeb6388de45b2e0c175f6de719df739b14cfd0500f3fce94e95d0a9f127
SHA512

2e6d4de5edfb066c81e08a6d04f82b09c44f520898d8328230b172dafda2197dc509dd6a58e0a345ffc74d403e9a7ff949e1ae2d20ac9f6152c41bf8bee60661
SSDEEP

24576:ZlDEOmXZLjtSvwE8hm3vVp7QbsKswxPSIk:kOUZLjAbh3vVNWRswI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SWIFT_PDF.exe

Files

SWIFT_PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZcgG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 906KB - Virtual size: 905KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ