Static task
static1
Behavioral task
behavioral1
Sample
Swift_copy.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Swift_copy.exe
Resource
win10v2004-20240508-en
General
-
Target
Swift_copy.exe
-
Size
840KB
-
MD5
b4e0d68cd11d3c370745b5bcfe981bd4
-
SHA1
f62912f7cf77b9cdd34b31c0eebd73094a82ec57
-
SHA256
ecd0495dc9d61ac16df7940ed6899897c02df2f51b4c87f19f6011ac10f17a61
-
SHA512
04ee1aac52fac547a59cf1ec52dcab9138091eb27abbdd1bc5e9487f67c3870e334cdece880454a9b2548ad4dd8a32dfa5d092c8a8ad113b368fde0bbe460ddd
-
SSDEEP
12288:fRx504bFtx504bFWxX5sDHmdMVly4kO/p/tpN1hNQhj2M+pWaohOtm7D/9O9wsoJ:Zw4bjw4bYrmHlXFm25W5OK1raBGdXV7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Swift_copy.exe
Files
-
Swift_copy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 820KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ