Static task
static1
Behavioral task
behavioral1
Sample
Swift copy.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Swift copy.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Swift copy.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Swift copy.pdf.exe
Resource
win10v2004-20230824-en
General
-
Target
a9706d8db1e766adae1c2e9e3d400c9d.dat
-
Size
799KB
-
MD5
a9706d8db1e766adae1c2e9e3d400c9d
-
SHA1
892a5b0d50897ad19bdc5a5e03e2dad213e441ab
-
SHA256
9e0b4ae524bbfa601d7b379b27b3d3d5459d94bceeeafce0d157615d8bc04b4e
-
SHA512
a4681c06ce4d39e23349db42ec8ecf7ca22e4733f4a50b387caa374d04a08241af540f25e95c8b16ec366ebac5b629793a8306d8f786d1e4530027eb8ac6372b
-
SSDEEP
24576:OiSPFedM4IYVyLwFnE1Ng9jl0V7/rzmi9sjWjc:gFWM4rV9Fn6gv0V7zKiKjWjc
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Swift copy.exe unpack001/Swift copy.pdf.exe
Files
-
a9706d8db1e766adae1c2e9e3d400c9d.dat.rar
-
Swift copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Swift copy.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ