Static task
static1
Behavioral task
behavioral1
Sample
Swift copy.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Swift copy.exe
Resource
win10v2004-20240709-en
General
-
Target
b5499644dc50a30003d0a287c57cb42da103136acf930211cc6c9b9c063bd87f
-
Size
684KB
-
MD5
a481e4dbdb071a40cf6443343c3675fb
-
SHA1
6b2ad3241e3eb9950b9ecf9c7de888de393fb7b9
-
SHA256
b5499644dc50a30003d0a287c57cb42da103136acf930211cc6c9b9c063bd87f
-
SHA512
5119f7e0fce8f32b7525bfe97ecd1534b960e2641422e9ed514a4f384f07baf4b7f5ce6c0d52043234ac702f2eb117f3958b46723da912104f6f7e087d559e94
-
SSDEEP
12288:IBOwL3BC8MUZOf+VLXBS4JAGj2nUbm9y1vu:IwwL3c8HRS8j1bnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Swift copy.exe
Files
-
b5499644dc50a30003d0a287c57cb42da103136acf930211cc6c9b9c063bd87f.zip
Password: infected
-
9bc5e04220e8bbf50c378c4f087b260f244e0a1e4a766121ca06bf08bd55c87b.img.iso
-
Swift copy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ