Static task
static1
Behavioral task
behavioral1
Sample
SWIFT.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SWIFT.exe
Resource
win10v2004-20230831-en
General
-
Target
SWIFT.exe
-
Size
437KB
-
MD5
d816b708bc1175aedd33e81deda6c821
-
SHA1
d5234b89dd7782463e5bdc68d61c4250ceb0ee40
-
SHA256
5eb32ef6967e3846695ea35921b5f10dc00103bdb67b6c34726985b81cd589bf
-
SHA512
561f4be1e18f7a6a142f8f893e1ff50525de29db78ebe83695a1cb28f39fdefd458465bf0f5216f347c579706f06902ae3c9d513e822b579fa1098d16a46d059
-
SSDEEP
6144:wVigq9cS8j1l61lQpA5dToPpgvunU0U/RoqCdBvRGMWXWkWCmRSRPT1ARItqOJwf:wxkcSQpAA66eJcrGMNRCsgy9rpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFT.exe
Files
-
SWIFT.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 435KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ