Static task
static1
Behavioral task
behavioral1
Sample
AIRMAX CARGO-IMPORT-OCT STMT.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
AIRMAX CARGO-IMPORT-OCT STMT.exe
Resource
win10v2004-20231023-en
General
-
Target
AIRMAX CARGO-IMPORT-OCT STMT.7z.001
-
Size
607KB
-
MD5
5d71e6be81c1cc2912432b624df276a1
-
SHA1
e4843ec32009b61666d88e557130d765f28aeef1
-
SHA256
4934bbc335e5bf2756d62ac84c0d231ae6975c480374e9a55a4933b26fac0968
-
SHA512
b9ab21abd37b17f6440a7974e0ea2043368a3a864bdeee5bcbd55eee57bc190f8c75782b7019c7750bc5743f29804adfd07389d9a2e7f3a75e451bf7dbb2ab82
-
SSDEEP
12288:aNyDf3rTY48+4uTM45xlNhGXepRqH4yal7ovwp+SIs+YF2szSAnnMc:aNyXTYMLVNhGXsqHZtv9++tAn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AIRMAX CARGO-IMPORT-OCT STMT.exe
Files
-
AIRMAX CARGO-IMPORT-OCT STMT.7z.001.7z
-
AIRMAX CARGO-IMPORT-OCT STMT.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 603KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ