swift copy[.]exe | Triage

Resubmissions

10-05-2024 08:39

240510-kkchhadb4s 10

10-05-2024 08:35

240510-kg29rada3s 10

Sharing

General

Target

swift copy.exe
Size

684KB
MD5

a92d8ccd3f38a76aa886072adf9c1c94
SHA1

f8c6907b69f6f828c3bf9a7a0f850c36e215f315
SHA256

37c5d5a6008968981d866924fd7af33224f8c44505b381aac2fecec0468cb241
SHA512

23460c4d395796c7773d754b64748b5112270a6a7fe28246a9eae8523a30cc05221f0f923a49ddd72aca2cf0c1156a3e9b5346846071049eb427cbb58e8ca460
SSDEEP

12288:sjuhnDveLAfN31k+iYghBUGCypYWGYvGRfGSuIiupVH2Qn:xnDv513W+iYghBUGdpxHvufxZkQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
swift copy.exe

Files

swift copy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YfEq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ