Static task
static1
Behavioral task
behavioral1
Sample
Swift_copy.pdf.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Swift_copy.pdf.exe
Resource
win10v2004-20240226-en
General
-
Target
bde7610db130f75e82448a2b897403192be243cae02f8849c41ed9ca1cedcf1d.7z
-
Size
290KB
-
MD5
c6c820b42a384fbd52a0b150848504f0
-
SHA1
5bcba2886c2d421d472a3ead712f663729b0c65c
-
SHA256
bde7610db130f75e82448a2b897403192be243cae02f8849c41ed9ca1cedcf1d
-
SHA512
13c6e401162be12700407e677a77e4dbb8d13e5039e1c43d32bf943691748d97ddcccbe0041f1fca819839d674d01138be22cc996181017059b776c6b6f4649c
-
SSDEEP
6144:T/YVt8kBiUynuSgZgn5LaHRMGMGiOPcn61vFNFK5C2cafz3Ay56oHdAs:TAPMUq1pL4RMWiic65FNFKQ9az3PHHms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Swift_copy.pdf.exe
Files
-
bde7610db130f75e82448a2b897403192be243cae02f8849c41ed9ca1cedcf1d.7z.7z
-
Swift_copy.pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ