Static task
static1
Behavioral task
behavioral1
Sample
Galaxy_Swapper_v2.exe
Resource
win10v2004-20230221-en
General
-
Target
Galaxy_Swapper_v2.exe
-
Size
701KB
-
MD5
63bd14aad1b1ea2dc6e89e51cd2452b9
-
SHA1
a1013f765d01dd4f5cd1519b5e6a9a3d8dafabb6
-
SHA256
500c0474a1f9792a0172feef4d18b168491347b0f038ba3ddabd53822f76acee
-
SHA512
5cd4627ff828780fbea5b7f7050066ce5bad0502292b53ce998c4aaa9ba8b81b51c8ba7709023f6cd262b7aa93552f98a58dad25116caf3db9857c593aedd4d0
-
SSDEEP
12288:OCJcuW9BP2OoeHOsJ/l1xFAUqrWDuLMKtO1EJYq:OCJo1usJt1xFAFuugUOuJYq
Malware Config
Signatures
Files
-
Galaxy_Swapper_v2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 449KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ