SWIFT.7z
- SHA256 e9f7f56bc3de6401e73e911d5762780f50dc5b8739850a8cb43f980f87f14473
Static task
static1
Behavioral task
behavioral1
Sample
SWIFT.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SWIFT.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
18 signatures
150 seconds
General
- Target SWIFT.7z
- Size 309KB
- Sample230412-gm2cvsbh5x
- SHA256 e9f7f56bc3de6401e73e911d5762780f50dc5b8739850a8cb43f980f87f14473
- MD5 1fc4fab06c72d3ed4032a7fef16e083a
- SHA1 c895d5ba185a7da9d6795b587839bbc9c81a0921
- SHA512 8ecd660ebb3af924fffe0502886458ce821afb49d65fbe9a6b764e8be8ec5ecb020e0d985852d8eed43334867803f2bd72ca1299b7730a1188a6e08967878e8d
- SSDEEP 6144:3liN13uhYgjYU87XiTTdEyoUlmLpvj2AfLgaIqeZFSQ/KgqJIZa1+ONe7Bj:3UN13ujjYXCTyP7Lpb2q0Uyv/Lqea/eJ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
SWIFT.7z.7z 309KB
-
SWIFT.exe.exe 847KB
SWIFT.exe
- SHA256 a2231cdfce2e5ec3adcdb8535b1663da96d390e65c0f0c83c385a96d97790f0e
- MD5 24b58901a371adc86a36b7cc1189f2f6
- SHA1 4421669b2b505db421e5ecb36119aee48ade108f
- SHA512 8ba3252a9722e0e32a1bf2a6ff3ce51127a02df32bf56bed9e771aa7cde80853a0d1475bef10e3cbd2dd9592b3b1950fb3300536f37ebe9961e06140df7ef795
- SSDEEP 12288:m8rLgxLKQfJJuXFI3MU+oVv6G57D1l0JttQCMO+U1xldIuau/T2SAzCk13h:RrLgO0023ZQK9qEO+U1xldqu/T2SADh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
58:d4:8a:0a:a1:63:2c:f4:a8:ed:05:b9:27:aa:b7:63:75:80:4c:60
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Subject
CN=DOTPDN LLC,O=DOTPDN LLC,POSTALCODE=981541003,STREET=1001 4TH AVE STE 3200,L=SEATTLE,ST=Washington,C=US
Serial Number
87:3a:40:e7:ab:55:a6:56:d2:5d:8b:e8:74:ff:11:c7
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 23, 2020 - Aug 23, 2023
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
Major OS version
Entry point
527368
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
511KB
Virtual Size
511KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
275KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ