Static task
static1
Behavioral task
behavioral1
Sample
SWIFT.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SWIFT.exe
Resource
win10v2004-20220812-en
General
-
Target
SWIFT.iso
-
Size
752KB
-
MD5
5aaabbe3111f09127751c58b2a505bcf
-
SHA1
b0d699fa456b395687db9d87ab62658783289da2
-
SHA256
ac685999dd24dfae8112bf621ac53f24cb1ef222ad4506772affa86e1aede0b7
-
SHA512
57f654445a8a6724a2958e1cb87e4a51c581e8b61ce9a17546ec22a14eb38be6066cd896cd6fdd5a0c881c1accb3e40fd049dd1b1c9652a096c38f1b14bb2b81
-
SSDEEP
12288:AUJbck45+Uk3XXls83vRwPErs1S71IFCk1xyWIyJfCSTAqe8PiG81:PJF453CXHvRwYs1U1Ix1nJ6STA/8PiGi
Malware Config
Signatures
Files
-
SWIFT.iso.iso
-
SWIFT.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ