Swift copy[.]exe | Triage

Sharing

General

Target

Swift copy.exe
Size

700KB
MD5

a3f691b8cbca9531cb2e2711e0f2a166
SHA1

3f8369e5be5fa86d52afb5dbe538bddc0060ab90
SHA256

e8fe4366c2f5dec094103ca8abbf55bf6d2bfd50fa9e6441111678a0f0e8c432
SHA512

d0394294e50b28950a96cf1b061d19f5621eb402d20bf16aee212697af210a0befb05d8c7b7ec93e38000cfecbd076829662fe1d5ead075776d9f69ea075e84c
SSDEEP

12288:hdrLbDZaNRpTTqcoXw8w4r9a4klENmi/Z1VQ62FcjD/fyww6Ht7NalxIJetRy3f:7LDZMRpTX9hv4kNeV7vxN7NajMv3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Swift copy.exe

Files

Swift copy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ