a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872

General

Target
a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872
Size 3.2MB
Sample260824-vx44dsec66
SHA256 a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872
MD5 598b6898e0b737e10358eacdcf60986a
SHA1 42461f15cf8a9f2b5e78c1210cb1a5fc5309b5e0
SHA512 7c2951a4c2e22b0773bf274c03b60bd8d02e129c5a59fe1d26642c1671c34b8f6314893af1dc54832bbe4850f25f94b6abd2121b4aa5fce33cd0ab1af498ceb6
SSDEEP 98304:PZdX3XhZMFKDzgwXPv4TLeRgl829f8H43M+8:P7XKKHgwHa6RgQdP
TLSH
T1EEF53354517860F36721C26C1F09441CB77E88FEFFC173956D83DF9AA266328A49AB2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SWIFT COPY.Pdf.exe

File Explorer

a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872

.zip 3.2MB
SWIFT COPY.Pdf.exe

.exe 3.4MB

a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872

SHA256 a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872
MD5 598b6898e0b737e10358eacdcf60986a
SHA1 42461f15cf8a9f2b5e78c1210cb1a5fc5309b5e0
SHA512 7c2951a4c2e22b0773bf274c03b60bd8d02e129c5a59fe1d26642c1671c34b8f6314893af1dc54832bbe4850f25f94b6abd2121b4aa5fce33cd0ab1af498ceb6
SSDEEP 98304:PZdX3XhZMFKDzgwXPv4TLeRgl829f8H43M+8:P7XKKHgwHa6RgQdP
TLSH
T1EEF53354517860F36721C26C1F09441CB77E88FEFFC173956D83DF9AA266328A49AB2C
MD5 SHA1 SHA512 SSDEEP TLSH

SWIFT COPY.Pdf.exe

SHA256 2b12841334e311828c4d1f940c0ebc5f0e577374f9eb4432fdcb6e63b54f34c7
MD5 e4b40164add8b9241f3111639b6e0774
SHA1 7f40a00d22c41399238b559f4a61e1e0bca15a66
SHA512 bce33d0cb8e940863f7bccea596782715448e983e1b57fa17cad1bd6b9a0a85d70dfe99027ed5d02c472c7016d91531b97ca684a7764a348ffc6aa7314e4b0b8
SSDEEP 98304:T6buoeVf7xr6HmdpOaT7vOXLK3S9KM1BkXox:kUVGmfOaP8+3SGo
TLSH
T1ABF502983110EC9EC9928A71CAA0DDF966312CABD616F20354D73D9FB93E556EF001E3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

a4d048a77c168206edb6f894dbc93b58d1e8b950471240b7e14ce50ab093f872

SWIFT COPY.Pdf.exe

generic