Static task
static1
Behavioral task
behavioral1
Sample
swift_1148590_pdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
swift_1148590_pdf.exe
Resource
win10v2004-20220901-en
General
-
Target
8258373368.zip
-
Size
764KB
-
MD5
a2ccbd980e1073a6d0d4b2db3dd00448
-
SHA1
9405f3705e7d96dae4f89346633dcb7205f70369
-
SHA256
48e9732dfe76ebf92ad0d020a7eb90b2e7207c046866e9ee2c77570621966f8a
-
SHA512
2050ce51104830503fe4d4a15ccfca8725a23164511bf8bb75303a146934288c38683962048419961b5e491f8715a086afdcfbe8917ce9a250efc3acf4da9921
-
SSDEEP
12288:YAHZb119YamBFrIqLtB/tHm2JcSNFXlqir25/JUw76HnmwKtEVigUdz5fPUtwWHt:YAfT54ptHpcGFLr2tvBpWVzqyw1b5bL6
Malware Config
Signatures
Files
-
8258373368.zip.zip
Password: infected
-
6f0c0052a701450f945e4a0b7ca17ef30831f142d27f01aaac9d2b55a9a2de70.cab
-
swift_1148590_pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ