Static task
static1
Behavioral task
behavioral1
Sample
DSR -AIROLAM - 2024.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DSR -AIROLAM - 2024.exe
Resource
win10v2004-20240412-en
General
-
Target
DSR -AIROLAM - 2024.7z
-
Size
617KB
-
MD5
6fcc661a7e607d148d96a1ef9392a822
-
SHA1
f4ab7866cb01087cfe08084733e341666adf1583
-
SHA256
6e688cc52232f08d7b8b32d42415e5cad4228a6a87dbb347e3124a69c28c8b45
-
SHA512
df09045d1961a7e676a584abb12dc11cf184872795d3ae435f3c5723d5ec2ec32fa85ab51ef8df33ec21b9a30343570b668e5fa78457956828de8198081f964f
-
SSDEEP
12288:JVgGtuqWdkq733MBkrw7iAJMXi/Js4htFomzqoRagFJLTy/0/7:fq33Myw7a4LFlRBF00z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DSR -AIROLAM - 2024.exe
Files
-
DSR -AIROLAM - 2024.7z.rar
-
DSR -AIROLAM - 2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ