Static task
static1
Behavioral task
behavioral1
Sample
SWIFT COPY.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SWIFT COPY.exe
Resource
win10v2004-20230703-en
General
-
Target
SWIFT COPY.exe
-
Size
831KB
-
MD5
a0f68fc3322108c9561a8783aa72116e
-
SHA1
1ee5a076e5b91aaf2ae848848b801201b3bf4c02
-
SHA256
f0780de7079d9f0e75770111e6fe192424f73c8b931e0b6f0e45ad8b209db1a2
-
SHA512
2074c911e7bb56594bb1d8b3acc8930a0eaa35a7316f42dfb12d6613df7cd6ee22c147e63e92c3145862cb986c80cc8492040356ed76df15f1e0564d0bffa689
-
SSDEEP
24576:TIRs6CE3jLMpppdpppppUO9Rs6CE3jLMpppdpppppUO0UF73MC/nwZb8ehPlYt:TIRs6CE3jLbO9Rs6CE3jLbO0G3MC/nww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFT COPY.exe
Files
-
SWIFT COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 828KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ