Static task
static1
Behavioral task
behavioral1
Sample
Swift_copy.pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Swift_copy.pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
fe32b58a16f41d37ac8899b5f339cd2602a9cdab167614248bfad09e89392605_JC.7z
-
Size
503KB
-
MD5
57d7bd758bf432050f65a0df7cc3b4b9
-
SHA1
80ce66a368a6ef53ba0a994638d566b0a9f8933a
-
SHA256
fe32b58a16f41d37ac8899b5f339cd2602a9cdab167614248bfad09e89392605
-
SHA512
86f1bf367478ca1f68387b5f80e2d4946c25c0fd8b1853cef9ae4c60d5427f7b4ffc8f25f9a3a961b056297a9613f8afe77648e447e23f214712c12a0d3a8feb
-
SSDEEP
12288:2x/xf6lh3THMMS+1vK9akfQOx0x86J9e/1EpWeEAALOMb5dwcm9m:2txClhbrOfQOxCe/1leEAg998m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Swift_copy.pdf.exe
Files
-
fe32b58a16f41d37ac8899b5f339cd2602a9cdab167614248bfad09e89392605_JC.7z.7z
-
Swift_copy.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 587KB - Virtual size: 586KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ