Static task
static1
Behavioral task
behavioral1
Sample
Swift Copy.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Swift Copy.exe
Resource
win10v2004-20230915-en
General
-
Target
Swift Copy.exe
-
Size
615KB
-
MD5
8ca4f2a1bc1d9b1e477579360997fd33
-
SHA1
03752ab0449bdb4d67039637e757fe0fd6ea3fb2
-
SHA256
e78c8648218f38b73143f2db83c972448cbebf6018e3d74f99622a84f3aff875
-
SHA512
18ac25e58f56c125f7158e36bf3b5b4bcbc83dfc795c44819947b0d9fe58c1d845addc86bd839443fcc755f366239612a3f6717ca3a3e18075626f5e46a8cb85
-
SSDEEP
12288:1TJ22PO5h0iYhaBxQMGKC7SNIJNHEz+zQtJU6zVd2wDtx8:f222+asKCG+JhYaQtJ1V0wpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Swift Copy.exe
Files
-
Swift Copy.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ