Static task
static1
Behavioral task
behavioral1
Sample
swift_____.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
swift_____.exe
Resource
win10v2004-20250314-en
General
-
Target
swift_____.rar
-
Size
686KB
-
MD5
e228466f3c99e63483a4b58f95661582
-
SHA1
642e298a9e3b6fe4dc5f8de3bc24f6290c1e16ce
-
SHA256
a00984beafc2ba1344ed0591dc8a0426e331f97c0eed001463488cc57d3a85b8
-
SHA512
ec40057bb313a77217c0dd9cb7c7fe30bdbe0d567808879e594a8717f9bee59f3e64ac14e9b3d51af16647784d4a98814d7105d37787d38e0661325b7c538875
-
SSDEEP
12288:BlU4mBxIUHJwt9UTpqFf2ER3tPhJAj3cmDFS7+3kCbWEq7NYsl+8D3BD8SWQZ5yk:P3mBxIfUN02EHPADtRA+3VWDxY6+8Dxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/swift_____.exe
Files
-
swift_____.rar.rar
-
swift_____.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 710KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ