Static task
static1
Behavioral task
behavioral1
Sample
Swfit_Copy__pdf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Swfit_Copy__pdf.exe
Resource
win10v2004-20230915-en
General
-
Target
bcbd00aaa78de387bb35692ad1da7391aa1bbd6ff1c223f0d92139bf2d215d2e
-
Size
480KB
-
MD5
ae274f9a5a40a559848248dcf56242bb
-
SHA1
43943348b2baadf3eb3fe8dad9c0af7bcec1a30d
-
SHA256
bcbd00aaa78de387bb35692ad1da7391aa1bbd6ff1c223f0d92139bf2d215d2e
-
SHA512
a97aff9676b91df8adf4a95e86f3c9671fbd9a4f9f99fc744e7b4e2bb37a1733e7102b90c6291db8bf66678670c5afced9bd2764da5694dd30e4cb5aa6d5a246
-
SSDEEP
12288:50zk3G1xe0fmS3ZCk2+9oiEwdywzQDV1CGMII5M:50QmeOEeo6QB1n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Swfit_Copy__pdf.exe
Files
-
bcbd00aaa78de387bb35692ad1da7391aa1bbd6ff1c223f0d92139bf2d215d2e.zip
-
Swfit_Copy__pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ