Static task
static1
Behavioral task
behavioral1
Sample
MT103 swift copy.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
MT103 swift copy.exe
Resource
win10v2004-20240802-en
General
-
Target
MT103 swift copy.exe
-
Size
831KB
-
MD5
5bd6fc793026df7e9afeea69d8ad2d06
-
SHA1
15d698923e1e9cc1269fcd2677b8d4cc976b29ba
-
SHA256
3a8cd4cbcabcc59b3b845e3db862425d9a2dbec034ff2ccd87e9ad219357488f
-
SHA512
386a583f2eb598a908a10c2b3753fa14200b1ee4f6ab3ce6926d4519136c712d8504272dac423457d9ac56ce60e0e506445fd1f83bce9de72601197c9d6db1a2
-
SSDEEP
24576:q5pL35i55QOcJmVRFBQE0+iWeuUMhlrPBy0:qLti55N1VrBQERiWeLMHJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MT103 swift copy.exe
Files
-
MT103 swift copy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 821KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ