swift[.]exe | Triage™

General

Target
swift.exe
Size 282KB
Sample230522-gm1rbsec99
SHA256 2d77d7ddd1e8196a342b4b660d0ca60c53f01efded9d244d374c5649f40a2542
MD5 bddd80ae39eb5e20652aead1473f9188
SHA1 d28911686b11ba7cbb625121fffb165bc77990d4
SHA512 920a4ec7382d9043afb4d69ceb033d7ae96031b7b26d0b245b4d68fbf66bcb56063af9cd591f3fb4514c5551aa0993e3a9a6e8b27af8c31f325f3831aaf71ca0
SSDEEP 3072:V1Ygul1lNGlVtxPGbOgO5jz2Cs+E+OTDL/sdEEvWK8/x7JocMVrv3oF6JXrTr:YFlLu4bPw2Cs+E+afq9AZ+RPjPr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift.exe

File Explorer

swift.exe

.exe 282KB

swift.exe

IMPHASH f4492804ef800c5af0eb5787c534d586
SHA256 2d77d7ddd1e8196a342b4b660d0ca60c53f01efded9d244d374c5649f40a2542
MD5 bddd80ae39eb5e20652aead1473f9188
SHA1 d28911686b11ba7cbb625121fffb165bc77990d4
SHA512 920a4ec7382d9043afb4d69ceb033d7ae96031b7b26d0b245b4d68fbf66bcb56063af9cd591f3fb4514c5551aa0993e3a9a6e8b27af8c31f325f3831aaf71ca0
SSDEEP 3072:V1Ygul1lNGlVtxPGbOgO5jz2Cs+E+OTDL/sdEEvWK8/x7JocMVrv3oF6JXrTr:YFlLu4bPw2Cs+E+afq9AZ+RPjPr
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39917

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetCommState ReadConsoleA InterlockedDecrement CreateJobObjectW InterlockedCompareExchange AddConsoleAliasW GetProcessPriorityBoost GetConsoleAliasesLengthA GetConsoleTitleA GetWindowsDirectoryA InitializeCriticalSection GlobalAlloc IsValidLocale GetLocaleInfoW FatalAppExitW IsBadCodePtr GetSystemWindowsDirectoryA GetVersionExW GlobalFlags FindNextVolumeW GetConsoleAliasW ReplaceFileW IsDBCSLeadByte CreateActCtxA GetTempPathW GetStringTypeExA AllocConsole GetStdHandle GetLogicalDriveStringsA OpenMutexW GetLastError BindIoCompletionCallback GetProcAddress AttachConsole VirtualAlloc GetTempFileNameA LoadLibraryA DnsHostnameToComputerNameA CreateFileMappingW VirtualLock GetTapeParameters GetModuleFileNameA GetDefaultCommConfigA FindFirstVolumeMountPointA GetModuleHandleA HeapSetInformation GetConsoleTitleW WaitForDebugEvent _lopen FindAtomW AddConsoleAliasA ReadConsoleOutputCharacterW EnumCalendarInfoExA lstrlenA GetDateFormatW SetThreadContext WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW HeapAlloc HeapCreate VirtualFree HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA InitializeCriticalSectionAndSpinCount

user32

CharLowerBuffW

gdi32

GetCharWidthW GetCharABCWidthsFloatW EnumFontsA

Sharing