Static task
static1
Behavioral task
behavioral1
Sample
Swift-14213851695_1068620941254_20231212_.xlsx.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Swift-14213851695_1068620941254_20231212_.xlsx.exe
Resource
win10v2004-20240226-en
General
-
Target
Swift-14213851695_1068620941254_20231212_.xlsx.exe
-
Size
716KB
-
MD5
716775870c3dbf7d5da95a7778fb9a51
-
SHA1
e9708c2b82f5f92db13e9b5cdbe0e50762a5815b
-
SHA256
cca1dafa21e94b11519e381134d0946c638230a3a548a67f89af7ce7111567d2
-
SHA512
06c1ebeb05954742277869235bab8b1c44b0f432e0ca62061267f1afa7c76c8ba5af0eed715e9452517ce19912b5edfe205615e987fe9be941bf7ab457a90fce
-
SSDEEP
12288:bRiq+ZpOIq16cb1GSUkb2gb8Dvr9QWfXqwDZrmI4VSLJh9UPUyP8U:bvKpOIWGkSw8DrxqKZrm7MJHUPUyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Swift-14213851695_1068620941254_20231212_.xlsx.exe
Files
-
Swift-14213851695_1068620941254_20231212_.xlsx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ