C:\a\swift-build\swift-build\BinaryCache\swift\bin\swiftSynchronization.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf.dll
Resource
win10v2004-20231215-en
General
-
Target
cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf
-
Size
48KB
-
MD5
36051356a619dd42c89b89a77e49c1f3
-
SHA1
f961a49da4f808e5d06f19d7f7ca7fdf96c3ceae
-
SHA256
cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf
-
SHA512
9275a86d4990e97ec310831b3e13fc1896bcb9d81e18688d266f19b99b8020f30c77032e1bf4910c7812ea6e1d79a6e688d275d82251155296f5a8f2f9604cb2
-
SSDEEP
384:lgeHTbE5276pQp/dh7rzVemvzlISI2UwSDRbc397HLRnuCvd/vZztzfnt0hCzbZz:UOa8jhn2ubPdiSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf
Files
-
cdf83cb6fc3bdcf61442f3f47123b9e0af3d10c79b72199521bed131ee23fcaf.dll windows:6 windows x64 arch:x64
81b5b3459f331aa886dd4f59a8ede92f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
swiftcore
$sSH13_rawHashValue4seedS2i_tFTq
$sSH4hash4intoys6HasherVz_tFTq
$sSH9hashValueSivgTq
$sSHMp
$sSHSQTb
$sSOMn
$sSPMn
$sSQ2eeoiySbx_xtFZTq
$sSQMp
$sSR11baseAddressSPyxGSgvg
$sSR5start5countSRyxGSPyxGSg_SitcfC
$sSRMn
$sSS6appendyySSF
$sSVMn
$sSWMn
$sSbMn
$sSdMn
$sSfMn
$sSiMn
$sSiN
$sSis23CustomStringConvertiblesMc
$sSp12deinitialize5countSvSi_tF
$sSpMn
$sSq3mapyqd__Sgqd__xKXEKlF
$sSqMa
$sSqMn
$sSr11baseAddressSpyxGSgvg
$sSr5start5countSryxGSpyxGSg_SitcfC
$sSrMn
$sSuMn
$sSuN
$sSus23CustomStringConvertiblesMc
$sSvMn
$sSwMn
$ss11_StringGutsV4growyySiF
$ss13OpaquePointerVMn
$ss23CustomStringConvertibleMp
$ss23CustomStringConvertibleP11descriptionSSvgTj
$ss23CustomStringConvertibleP11descriptionSSvgTq
$ss28CustomDebugStringConvertibleMp
$ss28CustomDebugStringConvertibleP16debugDescriptionSSvgTq
$ss4Int8VMn
$ss5Int16VMn
$ss5Int32VMn
$ss5Int64VMn
$ss5NeverOMn
$ss5UInt8VMn
$ss6HasherV5_seedABSi_tcfC
$ss6HasherV8_combineyySuF
$ss6HasherV9_finalizeSiyF
$ss6UInt16VMn
$ss6UInt32VMn
$ss6UInt64VMn
$ss7Float16VMn
$ss8DurationVMn
$ss9UnmanagedVMa
$ss9UnmanagedVMn
$sytN
swift_addNewDSOImage
swift_allocateGenericValueMetadata
swift_bridgeObjectRelease
swift_bridgeObjectRetain
swift_bridgeObjectRetain_n
swift_copyPOD
swift_getAssociatedTypeWitness
swift_getGenericMetadata
swift_getTypeByMangledNameInContext2
swift_getWitnessTable
swift_initRawStructMetadata
swift_release
swift_retain
kernel32
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
Exports
Exports
$s15Synchronization18AtomicLoadOrderingV11descriptionSSvg
$s15Synchronization18AtomicLoadOrderingV11descriptionSSvpMV
$s15Synchronization18AtomicLoadOrderingV2eeoiySbAC_ACtFZ
$s15Synchronization18AtomicLoadOrderingV4hash4intoys6HasherVz_tF
$s15Synchronization18AtomicLoadOrderingV9_rawValueACSi_tcfC
$s15Synchronization18AtomicLoadOrderingV9_rawValueSivM
$s15Synchronization18AtomicLoadOrderingV9_rawValueSivg
$s15Synchronization18AtomicLoadOrderingV9_rawValueSivpMV
$s15Synchronization18AtomicLoadOrderingV9_rawValueSivs
$s15Synchronization18AtomicLoadOrderingV9hashValueSivg
$s15Synchronization18AtomicLoadOrderingV9hashValueSivpMV
$s15Synchronization18AtomicLoadOrderingVMa
$s15Synchronization18AtomicLoadOrderingVMn
$s15Synchronization18AtomicLoadOrderingVN
$s15Synchronization18AtomicLoadOrderingVSHAAMc
$s15Synchronization18AtomicLoadOrderingVSQAAMc
$s15Synchronization18AtomicLoadOrderingVs23CustomStringConvertibleAAMc
$s15Synchronization18_Atomic8BitStorageV8_storageBi8_vM
$s15Synchronization18_Atomic8BitStorageV8_storageBi8_vg
$s15Synchronization18_Atomic8BitStorageV8_storageBi8_vpMV
$s15Synchronization18_Atomic8BitStorageV8_storageBi8_vs
$s15Synchronization18_Atomic8BitStorageVMa
$s15Synchronization18_Atomic8BitStorageVMn
$s15Synchronization18_Atomic8BitStorageVN
$s15Synchronization19AtomicLazyReferenceV10storeIfNilyxxnF
$s15Synchronization19AtomicLazyReferenceV4loadxSgyF
$s15Synchronization19AtomicLazyReferenceV7storageAA0B0Vys9UnmanagedVyxGSgGvr
$s15Synchronization19AtomicLazyReferenceVACyxGycfC
$s15Synchronization19AtomicLazyReferenceVMa
$s15Synchronization19AtomicLazyReferenceVMn
$s15Synchronization19AtomicLazyReferenceVfD
$s15Synchronization19AtomicRepresentableMp
$s15Synchronization19AtomicRepresentableP06decodeB14Representationyx0bE0QznFZTj
$s15Synchronization19AtomicRepresentableP06decodeB14Representationyx0bE0QznFZTq
$s15Synchronization19AtomicRepresentableP06encodeB14Representationy0bE0QzxnFZTj
$s15Synchronization19AtomicRepresentableP06encodeB14Representationy0bE0QzxnFZTq
$s15Synchronization19AtomicRepresentableTL
$s15Synchronization19AtomicStoreOrderingV11descriptionSSvg
$s15Synchronization19AtomicStoreOrderingV11descriptionSSvpMV
$s15Synchronization19AtomicStoreOrderingV2eeoiySbAC_ACtFZ
$s15Synchronization19AtomicStoreOrderingV4hash4intoys6HasherVz_tF
$s15Synchronization19AtomicStoreOrderingV9_rawValueACSi_tcfC
$s15Synchronization19AtomicStoreOrderingV9_rawValueSivM
$s15Synchronization19AtomicStoreOrderingV9_rawValueSivg
$s15Synchronization19AtomicStoreOrderingV9_rawValueSivpMV
$s15Synchronization19AtomicStoreOrderingV9_rawValueSivs
$s15Synchronization19AtomicStoreOrderingV9hashValueSivg
$s15Synchronization19AtomicStoreOrderingV9hashValueSivpMV
$s15Synchronization19AtomicStoreOrderingVMa
$s15Synchronization19AtomicStoreOrderingVMn
$s15Synchronization19AtomicStoreOrderingVN
$s15Synchronization19AtomicStoreOrderingVSHAAMc
$s15Synchronization19AtomicStoreOrderingVSQAAMc
$s15Synchronization19AtomicStoreOrderingVs23CustomStringConvertibleAAMc
$s15Synchronization19_Atomic16BitStorageV8_storageBi16_vM
$s15Synchronization19_Atomic16BitStorageV8_storageBi16_vg
$s15Synchronization19_Atomic16BitStorageV8_storageBi16_vpMV
$s15Synchronization19_Atomic16BitStorageV8_storageBi16_vs
$s15Synchronization19_Atomic16BitStorageVMa
$s15Synchronization19_Atomic16BitStorageVMn
$s15Synchronization19_Atomic16BitStorageVN
$s15Synchronization19_Atomic32BitStorageV8_storageBi32_vM
$s15Synchronization19_Atomic32BitStorageV8_storageBi32_vg
$s15Synchronization19_Atomic32BitStorageV8_storageBi32_vpMV
$s15Synchronization19_Atomic32BitStorageV8_storageBi32_vs
$s15Synchronization19_Atomic32BitStorageVMa
$s15Synchronization19_Atomic32BitStorageVMn
$s15Synchronization19_Atomic32BitStorageVN
$s15Synchronization19_Atomic64BitStorageV8_storageBi64_vM
$s15Synchronization19_Atomic64BitStorageV8_storageBi64_vg
$s15Synchronization19_Atomic64BitStorageV8_storageBi64_vpMV
$s15Synchronization19_Atomic64BitStorageV8_storageBi64_vs
$s15Synchronization19_Atomic64BitStorageVMa
$s15Synchronization19_Atomic64BitStorageVMn
$s15Synchronization19_Atomic64BitStorageVN
$s15Synchronization20AtomicUpdateOrderingV11descriptionSSvg
$s15Synchronization20AtomicUpdateOrderingV11descriptionSSvpMV
$s15Synchronization20AtomicUpdateOrderingV2eeoiySbAC_ACtFZ
$s15Synchronization20AtomicUpdateOrderingV4hash4intoys6HasherVz_tF
$s15Synchronization20AtomicUpdateOrderingV9_rawValueACSi_tcfC
$s15Synchronization20AtomicUpdateOrderingV9_rawValueSivM
$s15Synchronization20AtomicUpdateOrderingV9_rawValueSivg
$s15Synchronization20AtomicUpdateOrderingV9_rawValueSivpMV
$s15Synchronization20AtomicUpdateOrderingV9_rawValueSivs
$s15Synchronization20AtomicUpdateOrderingV9hashValueSivg
$s15Synchronization20AtomicUpdateOrderingV9hashValueSivpMV
$s15Synchronization20AtomicUpdateOrderingVMa
$s15Synchronization20AtomicUpdateOrderingVMn
$s15Synchronization20AtomicUpdateOrderingVN
$s15Synchronization20AtomicUpdateOrderingVSHAAMc
$s15Synchronization20AtomicUpdateOrderingVSQAAMc
$s15Synchronization20AtomicUpdateOrderingVs23CustomStringConvertibleAAMc
$s15Synchronization20_Atomic128BitStorageV8_storageBi128_vM
$s15Synchronization20_Atomic128BitStorageV8_storageBi128_vg
$s15Synchronization20_Atomic128BitStorageV8_storageBi128_vpMV
$s15Synchronization20_Atomic128BitStorageV8_storageBi128_vs
$s15Synchronization20_Atomic128BitStorageVMa
$s15Synchronization20_Atomic128BitStorageVMn
$s15Synchronization20_Atomic128BitStorageVN
$s15Synchronization27AtomicOptionalRepresentableMp
$s15Synchronization27AtomicOptionalRepresentableP06decodebC14RepresentationyxSg0bcF0QznFZTj
$s15Synchronization27AtomicOptionalRepresentableP06decodebC14RepresentationyxSg0bcF0QznFZTq
$s15Synchronization27AtomicOptionalRepresentableP06encodebC14Representationy0bcF0QzxSgnFZTj
$s15Synchronization27AtomicOptionalRepresentableP06encodebC14Representationy0bcF0QzxSgnFZTq
$s15Synchronization27AtomicOptionalRepresentablePAA0bD0Tb
$s15Synchronization27AtomicOptionalRepresentableTL
$s15Synchronization6AtomicVMa
$s15Synchronization6AtomicVMn
$s15Synchronization8WordPairV11descriptionSSvg
$s15Synchronization8WordPairV11descriptionSSvpMV
$s15Synchronization8WordPairV16debugDescriptionSSvg
$s15Synchronization8WordPairV16debugDescriptionSSvpMV
$s15Synchronization8WordPairV5firstSuvM
$s15Synchronization8WordPairV5firstSuvg
$s15Synchronization8WordPairV5firstSuvpMV
$s15Synchronization8WordPairV5firstSuvs
$s15Synchronization8WordPairV6secondSuvM
$s15Synchronization8WordPairV6secondSuvg
$s15Synchronization8WordPairV6secondSuvpMV
$s15Synchronization8WordPairV6secondSuvs
$s15Synchronization8WordPairV9hashValueSivg
$s15Synchronization8WordPairV9hashValueSivpMV
$s15Synchronization8WordPairVAA19AtomicRepresentableAAMc
$s15Synchronization8WordPairVAA19AtomicRepresentableAAWP
$s15Synchronization8WordPairVMa
$s15Synchronization8WordPairVMn
$s15Synchronization8WordPairVN
$s15Synchronization8WordPairVSHAAMc
$s15Synchronization8WordPairVSQAAMc
$s15Synchronization8WordPairVs23CustomStringConvertibleAAMc
$s15Synchronization8WordPairVs28CustomDebugStringConvertibleAAMc
$s20AtomicRepresentation15Synchronization0A13RepresentablePTl
$s28AtomicOptionalRepresentation15Synchronization0aB13RepresentablePTl
$sSO15Synchronization19AtomicRepresentableAAMc
$sSO15Synchronization19AtomicRepresentableAAWP
$sSO15Synchronization27AtomicOptionalRepresentableAAMc
$sSO15Synchronization27AtomicOptionalRepresentableAAWP
$sSPyxG15Synchronization19AtomicRepresentableABMc
$sSPyxG15Synchronization19AtomicRepresentableABWP
$sSPyxG15Synchronization27AtomicOptionalRepresentableABMc
$sSPyxG15Synchronization27AtomicOptionalRepresentableABWP
$sSRyxG15Synchronization19AtomicRepresentableABMc
$sSRyxG15Synchronization19AtomicRepresentableABWP
$sSV15Synchronization19AtomicRepresentableAAMc
$sSV15Synchronization19AtomicRepresentableAAWP
$sSV15Synchronization27AtomicOptionalRepresentableAAMc
$sSV15Synchronization27AtomicOptionalRepresentableAAWP
$sSW15Synchronization19AtomicRepresentableAAMc
$sSW15Synchronization19AtomicRepresentableAAWP
$sSb15Synchronization19AtomicRepresentableAAMc
$sSb15Synchronization19AtomicRepresentableAAWP
$sSd15Synchronization19AtomicRepresentableAAMc
$sSd15Synchronization19AtomicRepresentableAAWP
$sSf15Synchronization19AtomicRepresentableAAMc
$sSf15Synchronization19AtomicRepresentableAAWP
$sSi15Synchronization19AtomicRepresentableAAMc
$sSi15Synchronization19AtomicRepresentableAAWP
$sSpyxG15Synchronization19AtomicRepresentableABMc
$sSpyxG15Synchronization19AtomicRepresentableABWP
$sSpyxG15Synchronization27AtomicOptionalRepresentableABMc
$sSpyxG15Synchronization27AtomicOptionalRepresentableABWP
$sSryxG15Synchronization19AtomicRepresentableABMc
$sSryxG15Synchronization19AtomicRepresentableABWP
$sSu15Synchronization19AtomicRepresentableAAMc
$sSu15Synchronization19AtomicRepresentableAAWP
$sSv15Synchronization19AtomicRepresentableAAMc
$sSv15Synchronization19AtomicRepresentableAAWP
$sSv15Synchronization27AtomicOptionalRepresentableAAMc
$sSv15Synchronization27AtomicOptionalRepresentableAAWP
$sSw15Synchronization19AtomicRepresentableAAMc
$sSw15Synchronization19AtomicRepresentableAAWP
$ss13OpaquePointerV15Synchronization19AtomicRepresentableACMc
$ss13OpaquePointerV15Synchronization19AtomicRepresentableACWP
$ss13OpaquePointerV15Synchronization27AtomicOptionalRepresentableACMc
$ss13OpaquePointerV15Synchronization27AtomicOptionalRepresentableACWP
$ss4Int8V15Synchronization19AtomicRepresentableACMc
$ss4Int8V15Synchronization19AtomicRepresentableACWP
$ss5Int16V15Synchronization19AtomicRepresentableACMc
$ss5Int16V15Synchronization19AtomicRepresentableACWP
$ss5Int32V15Synchronization19AtomicRepresentableACMc
$ss5Int32V15Synchronization19AtomicRepresentableACWP
$ss5Int64V15Synchronization19AtomicRepresentableACMc
$ss5Int64V15Synchronization19AtomicRepresentableACWP
$ss5NeverO15Synchronization19AtomicRepresentableACMc
$ss5NeverO15Synchronization19AtomicRepresentableACWP
$ss5UInt8V15Synchronization19AtomicRepresentableACMc
$ss5UInt8V15Synchronization19AtomicRepresentableACWP
$ss6UInt16V15Synchronization19AtomicRepresentableACMc
$ss6UInt16V15Synchronization19AtomicRepresentableACWP
$ss6UInt32V15Synchronization19AtomicRepresentableACMc
$ss6UInt32V15Synchronization19AtomicRepresentableACWP
$ss6UInt64V15Synchronization19AtomicRepresentableACMc
$ss6UInt64V15Synchronization19AtomicRepresentableACWP
$ss7Float16V15Synchronization19AtomicRepresentableACMc
$ss7Float16V15Synchronization19AtomicRepresentableACWP
$ss8DurationV15Synchronization19AtomicRepresentableACMc
$ss8DurationV15Synchronization19AtomicRepresentableACWP
$ss9UnmanagedVyxG15Synchronization19AtomicRepresentableADMc
$ss9UnmanagedVyxG15Synchronization19AtomicRepresentableADWP
$ss9UnmanagedVyxG15Synchronization27AtomicOptionalRepresentableADMc
$ss9UnmanagedVyxG15Synchronization27AtomicOptionalRepresentableADWP
$sxSg15Synchronization19AtomicRepresentableA2B0b8OptionalC0RzlMc
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5acfn Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5asty Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5bltn Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5cptr Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5flmd Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5hash Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5mpen Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5prt Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5prtc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5ratt Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5repl Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5reps Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5rfst Size: 512B - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5test Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5tym2 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5tymd Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sw5tyrf Size: 512B - Virtual size: 429B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ