Several malware authors name their samples after legitimate executables to evade detection. Signs of a : iw7-ship.exe