Static task
static1
Behavioral task
behavioral1
Sample
SWIFT COPY 0787902.pdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SWIFT COPY 0787902.pdf.exe
Resource
win10v2004-20221111-en
General
-
Target
SWIFT COPY 0787902.pdf.exe
-
Size
874KB
-
MD5
4fa8640cc3ed7161026bb6cd7af03de9
-
SHA1
0cbcbd1405c92a899c4ba19d43f15506a48522d6
-
SHA256
7d956db974d1bec1d921401a5acba078dd074aacc7fc9ca714fd2b617bb8c428
-
SHA512
1b9b5af28a8a66bf1c1645ae8887c5411cff02e81d5657a20e4d1dbb5b9564066d251a422de79d32cf29ce455cc5c27ad7cbbb00b85187aa8667aae5442885a0
-
SSDEEP
24576:wI3+NNx8QjgzqfHK9yYDdWy8Z3542jTl6vd8:9yR8OfH+DFspLjTl6vK
Malware Config
Signatures
Files
-
SWIFT COPY 0787902.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 685KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ