ecgE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
swift copy.pdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
swift copy.pdf.exe
Resource
win10v2004-20231215-en
General
-
Target
swift copy.pdf.exe
-
Size
736KB
-
MD5
15b59ac7f8c0592041ac568dccffa553
-
SHA1
3f7bdcfd4275394ed5e7812a84e8fb8b9a942f97
-
SHA256
04709040eacfb086cb71024a846c381ba9aaaabc80580aa2a63057df7ec218f9
-
SHA512
ad425e5bce2b87b096aa2fc0e8ca740b63a25194dbe817f014e7d24ef35d9176b90fa1ac0fcd9b530da920b2b500723dc4666216566e98f16188b9e2795af1e4
-
SSDEEP
12288:iRmU3YVf8jXDkDVMqUmpF1ibHgQMhF+ISMBvCs9FEiRK2Vs4E3pm5R:iQJVHvp1ikyIJCsDEiR0hg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource swift copy.pdf.exe
Files
-
swift copy.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 727KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ