Static task
static1
Behavioral task
behavioral1
Sample
Swift copy.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Swift copy.exe
Resource
win10v2004-20240508-en
General
-
Target
8a75c8853ee688d0293031a7f774203babd1e9c2f4876dc4f4b25667dd4db31b.zip
-
Size
639KB
-
MD5
bac460f8f2f0d0f5ccb74ee2cffae98e
-
SHA1
2a12655c20a2674953404af7c58b967eb5eae6ed
-
SHA256
8a75c8853ee688d0293031a7f774203babd1e9c2f4876dc4f4b25667dd4db31b
-
SHA512
e6b6e726a0ebe2c31abc6a95aefb26509b874901031c653160d9e956a46382756fc96e3fc285b3d1c36c8cf49f4eef7fc32cd4ad6831db9f5de9c9df96d9fc14
-
SSDEEP
12288:ARvAD3ADdWzF+73wKM8qzqUtFwfQrnDJiqkYWCBPLeUZtsVKSwykS2uD:MArGN7g78qzqUtKGAqkYWGeUE4Sv2uD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Swift copy.exe
Files
-
8a75c8853ee688d0293031a7f774203babd1e9c2f4876dc4f4b25667dd4db31b.zip.zip
-
Swift copy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ