Static task
static1
Behavioral task
behavioral1
Sample
Swift-100749.exe
Resource
win7-20220901-en
General
-
Target
Swift-100749.bin.zip
-
Size
721KB
-
MD5
75e23c1b241e32b08300d99fa69d2bdd
-
SHA1
87d1be06d8f69b2217ec3e3a729e140af46d1f94
-
SHA256
21cdd7ba7440f9ef71d9122951375a8227bfa04553a1d408ed7cb1ff896a8469
-
SHA512
30e08e0253d47c2ade1c3638af67211b7c73d1e3d4bda8b7d469c555de2ae8f7d9e37127a4cf72072ea61f3ba69ecd8e1bfe8ec8e20fc29af7a986cd710d7235
-
SSDEEP
12288:KwuZpQ8xz+oZ8SFc8H+8un1Nj+2fqGbUWpifgH2x6RTn3YtTPQty7UO5u4ZnE72L:v+pQMzp8AVHubzIx1UYtrFkKsA
Malware Config
Signatures
Files
-
Swift-100749.bin.zip.zip
Password: infected
-
Swift-100749.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 859KB - Virtual size: 859KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ