Swift_Copy[.]zip | Triage

Sharing

General

Target

Swift_Copy.zip
Size

308KB
MD5

7ff540eb44a0eadcd715858644a500c0
SHA1

6db1a0796c1d9879299b2d261ca2c7de926a12b4
SHA256

7ddacf946c3de29255d826fbce407672c991285e15bf4a0e33f28561847b7d6f
SHA512

1554cd6d0ebe916d87b1d0fb00edab802f080abd55f2fc2c875eb3b5c68993a613498ca9562a45d1313bf776075315ee7e1e027c9689c9882d7f890010976b28
SSDEEP

6144:urxP0YmmfZmDH1lAbYL6oVrCeFseUEorIgYLB8zh2kOw3xFhO5eLevNsWrl1b4dy:uVPVZoGbOMBeBge8/hF1CvNdrl1b4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Swift_Copy.exe

Files

Swift_Copy.zip
.zip
Swift_Copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ