Static task
static1
Behavioral task
behavioral1
Sample
swift copy .exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
swift copy .exe
Resource
win10v2004-20220414-en
General
-
Target
41a1e7d5d560fcd83cee7fb1030348ab18cb4f0e37a17e1efc4ad5c21fea978e
-
Size
174KB
-
MD5
6302183987e1ddeee4c6956ce64accc5
-
SHA1
019e4887b3cbae3a76f427878e4430e28d774a09
-
SHA256
41a1e7d5d560fcd83cee7fb1030348ab18cb4f0e37a17e1efc4ad5c21fea978e
-
SHA512
1f7d919ee5972d13ccacc4c92dceb092d88b3aeb1ae0e41cb392e10e7eafd91593d7501f0da7e6cb26e89bb44085ebfe9b1bdae6e2622b8dbb9c9a642f8b61aa
-
SSDEEP
3072:ynLpeEX/2VFjdBbvbRhRxZYsz/FzHQ67+tFUMxUz8O83qH/eG0ZrNi:yYEX/2VFjdtb/fFQ6kFUK3O/e9ZY
Malware Config
Signatures
Files
-
41a1e7d5d560fcd83cee7fb1030348ab18cb4f0e37a17e1efc4ad5c21fea978e.zip
-
swift copy .exe.exe windows x86
cb1374214cca532fa6942149f38f1676
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord593
ord632
EVENT_SINK_AddRef
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord575
ord100
Sections
.text Size: 488KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ