swift copy[.]exe | Triage

Sharing

General

Target

swift copy.exe
Size

639KB
MD5

2b7653777d822827c973d7bf565640ad
SHA1

a7c4d000944f6d2ad1e3738ef386bbfdfb139ded
SHA256

51902f6ca76f9cfe2df4cfc0df9ae887e9fa4e7c40eb009594ce5f6fc8529f48
SHA512

5eb90448ad673b2863f0c44668729094f2496eb357b0282d1cc4300f1c31df9d6986650a092534192fdf68047beabd2bdee6057c069b5149b4d42866885e829c
SSDEEP

12288:l2iN/1gXnmP/KH4GYd5L30QNMNMsBzAlVDlSrQHM7lCC:l1hyXn4CH8dxENpBsrsr9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift copy.exe

Files

swift copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ