SwiftPaymentCopy[.]pif[.]exe | Triage

Sharing

General

Target

SwiftPaymentCopy.pif.exe
Size

1.0MB
MD5

46ab34139423cd2978d27245891ce5d5
SHA1

1f48eece26d531e006cd41c43c6092558ee324c0
SHA256

4ed81a9a25e52a99d76805b081679cfe3628756be4bda6a47e365506c7df3a0c
SHA512

b764e97ae1d5a2328c5cef7b331aa9c6fd82715a5a4bb3b7209a31da2354f7dfa28f2b601a62e52cd850cd5aa5e0713fb77e480ef50abec65d18039d7ef92585
SSDEEP

24576:8OAi/eYBrgdPLmmpQNogk+qyh4Rck6jGTo7NE:8hi3BviDg36RlA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SwiftPaymentCopy.pif.exe

Files

SwiftPaymentCopy.pif.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

crEX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ