vqII.pdb
Static task
static1
Behavioral task
behavioral1
Sample
swift copy.bat.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
swift copy.bat.exe
Resource
win10v2004-20250217-en
General
-
Target
swift copy.bat.exe
-
Size
886KB
-
MD5
46eef01ce158bb926988c8f1a7a3a57e
-
SHA1
5da22f0fa774a878c8e772c306f66cd7d00e20df
-
SHA256
f5416d2c5f567506a87fd4be6b16ff2f5aac8f0176ba08fd57be4580c28e3ff8
-
SHA512
eef8caa1a658ebb424dcd126f7b559a22f5faa362d52bb3cf7397ba56b1ce4389ee7e16fde889f25c341c555d309ccf400875ff464fd23418f9622489aee84e2
-
SSDEEP
12288:4q15gMtYPdCxlA4rbeGXymuFQ3T01zSrqQ/B0Vrf1BebvbfIxN4Kuw+3L6tU:4qL5Y1CxlA4eyNuFm/qVTujfIN453L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource swift copy.bat.exe
Files
-
swift copy.bat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ