Static task
static1
Behavioral task
behavioral1
Sample
swift copy.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
swift copy.exe
Resource
win10v2004-20220812-en
General
-
Target
swift copy.exe
-
Size
793KB
-
MD5
e7b1f0571ee67b691b669c4f45c83187
-
SHA1
521da375100f92979cbf8cfe7bace01a2dc5b402
-
SHA256
969ed693de96feb146e36af913007eafca1fde166ccab5ebf191f0152acfd2a4
-
SHA512
1238233bebf1dcfa1ac8747a3b904704a282c4d6eaaeae26de302ab5d564c3e58b75712afc25ed6225ed8d8a88d480ca3dc5aabcf74b4a1ec48fbef69a9f6303
-
SSDEEP
12288:ViMtCBauWlWeh3ih9Hht5x+Zma9a1mUvKqoP+SUlDIcobbLAAukq:TBYThZSsTKq2+LI5v86q
Malware Config
Signatures
Files
-
swift copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ