Static task
static1
Behavioral task
behavioral1
Sample
swift copy.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
swift copy.exe
Resource
win10v2004-20230220-en
General
-
Target
swift copy.exe
-
Size
583KB
-
MD5
4407948389986e9c8fad21d05cbe73b0
-
SHA1
c44d8677afcb25db173b302651df4ad381e2dee4
-
SHA256
e1d9a89434bb4a539637fe0dadfe6b5d88ae49935a895e19ca5d2ad36f771825
-
SHA512
7479423cbedbf2c1eb1ff7ee5a67647a53d1b511d86459b21e56f53e9efc38d8620525d9cf4581220f36a814efc7c14651b3416b9fb74b450d9bdb7c06c99c7a
-
SSDEEP
12288:bYBv5GMjG0v7PijSO1Zp5iuO19LvIGesA9nG5oSJpdhzhyb:yg0zi5Zp+TcGFAlkpdhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource swift copy.exe
Files
-
swift copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ