Static task
static1
Behavioral task
behavioral1
Sample
swift - AY281U - 3791AHYY 9ANH67 AY37919 BG93761 NAH461 6B30AH3 37A83 SYEM917.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
swift - AY281U - 3791AHYY 9ANH67 AY37919 BG93761 NAH461 6B30AH3 37A83 SYEM917.exe
Resource
win10v2004-20231023-en
General
-
Target
swift - AY281U - 3791AHYY 9ANH67 AY37919 BG93761 NAH461 6B30AH3 37A83 SYEM917.exe
-
Size
2.5MB
-
MD5
49924ea4a160147f5b52e161f1b02263
-
SHA1
cf15290086b23f9781557e8fbb873331ed6df971
-
SHA256
d25cc9e2385b6284d26c7101afaf60769e57f55003f3079fed26d93ddc0ad031
-
SHA512
c2c52f8d2d0e664c75e188c7e1c2f15f1c841f41eb99091af20a924a6f3d89df4a4408fa9c20f24be2de0633ed38ce9a5fe8c9d8583814f3fab9a3086e8e756d
-
SSDEEP
49152:nGMwMYo33sJI5p4zU27k2y69NsE6UChqAdXHgRAy4EzW5PkI:n7sipaaDVHgRxM5PkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource swift - AY281U - 3791AHYY 9ANH67 AY37919 BG93761 NAH461 6B30AH3 37A83 SYEM917.exe
Files
-
swift - AY281U - 3791AHYY 9ANH67 AY37919 BG93761 NAH461 6B30AH3 37A83 SYEM917.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ