YfEq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
swift copy.exe
Resource
win7-20240221-en
General
-
Target
8ee996efb0612e0caad299a06600fce405d7c58a669e4c41ed3713c4110a5cae.rar
-
Size
656KB
-
MD5
d31de1e153e2b00d9ed83fe48d9b698c
-
SHA1
079f155db784c38e5a02211e4268c99baa167aaa
-
SHA256
8ee996efb0612e0caad299a06600fce405d7c58a669e4c41ed3713c4110a5cae
-
SHA512
72e5e0834dcc73c8636ffbb5f84303514703c52cb977ee095488fcd29be4b07f2986f31a8c777e5f58515bd1db72784dec2545accfddf6c9830101f8e94642de
-
SSDEEP
12288:Q1amPVCm6SKttai6CKs7U9/tmV9hURC6YUhYC5ut9d+FzF+jFxYGsLo40OPK:Q1amSSCa3DdxO9hURC6YIut9AFzSI9Lc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/swift copy.exe
Files
-
8ee996efb0612e0caad299a06600fce405d7c58a669e4c41ed3713c4110a5cae.rar.rar
-
swift copy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ