Static task
static1
Behavioral task
behavioral1
Sample
SWIFT COPY.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SWIFT COPY.exe
Resource
win10v2004-20240419-en
General
-
Target
SWIFT COPY.exe
-
Size
711KB
-
MD5
44d55e53a465dbc0cb8b81e36bff36f2
-
SHA1
dd06f55750d94b0198bf2b27b90f1e6843089b0e
-
SHA256
9b2a20382a2f0aa6745217b19f51ba20f0e9bf07121ae3ff6aa0ec74850b0507
-
SHA512
6b748e09649e0abc741d36c2a2aedd3e783480d3d333fd7e4c834a1dc9f834c8b409fc4c3258a2f00f2dd6b2e808f427ce9dcd664dea633f524be7837584de5f
-
SSDEEP
12288:yxN5pIuEgITlMtlMgRwvitrRmyROP/C2faLJPyOrMyBnff4Ny1A3nuZVBpwCdZYV:yxN5uuOxMtlgERWnC2k2GfslX8VBpJZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFT COPY.exe
Files
-
SWIFT COPY.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ