General

  • Target

    53a638d0569a49c5cf6e440e31803ebd3ff9288d6fb671e79c005105c9d0f3b6

  • Size

    18.8MB

  • MD5

    829b45449ddcfc283c7088356251409c

  • SHA1

    113795ce46a7cdd827793457c711790c8556b649

  • SHA256

    53a638d0569a49c5cf6e440e31803ebd3ff9288d6fb671e79c005105c9d0f3b6

  • SHA512

    f22dc4618bce85577551a7762c899313970f26eb2ed843913041d34fead3f966025e2028956a4139739ad792505aaf58c7cff6d486ac693659d0c85d7e3b4ceb

  • SSDEEP

    393216:L4CNvJsWdrlnaxP5EQyfaoLYeX6J7/Bn4Z2IjnYRHb88GGRfL5IcDaLC4rP:LRvkP5ElCoLH6pExsb8SfVdOC4j

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 53a638d0569a49c5cf6e440e31803ebd3ff9288d6fb671e79c005105c9d0f3b6
    .zip
  • Air24.exe
    .exe windows:5 windows x86 arch:x86

    27d49f4914abb4d68525305f0a415025


    Headers

    Imports

    Exports

    Sections

  • data/AlienFX_v2.0_0013E035-0413-4960-83A1-B1DB82951ED3.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_3E813170-FF30-4771-AD75-63ECEE827542.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_4A817745-D972-4139-A528-B42AE5AF4680.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_50EB361D-BA30-4EBE-9B38-A7C4340C77A9.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_90CE98EE-F3DC-456E-8680-4CD3743F2A04.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_B577CA38-848B-47F1-80F0-0F2F7711D012.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_E4533D14-4816-402A-AFE3-1331F4F9C510.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.0_F3695380-9F97-4044-AC9D-7C6365C9A99B.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_0D557297-5F78-4D9E-99DC-11AA994589CE.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_1896541B-A380-4820-BE05-DFAE0BC3D697.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_1D7FCA10-3CB7-4C18-9BFC-4A76D3F555F7.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_67C22399-A6C0-4989-B841-99ABC92FB499.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_78458E14-7A76-4620-B5B5-C703F75978FD.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_8C3C9121-0399-40E8-BE8A-056B9C32758B.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • data/AlienFX_v2.2_9185B243-3525-4707-BF01-FF36890F36B6.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • dll/CSCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Common.Logging.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Common.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Configuration.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Configuration.RemoteStorage.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Dell.Asimov.InstantRestore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Dell.Asimov.InterruptOperations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Dell.Pla.P1.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Dell.Pla.P1.MessageClient.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Execution.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/FrameworkCore.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Interop.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Logger.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/LogonUser.Classic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Microsoft.ServiceBus.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Protection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/Scheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • dll/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • en-US/hmmapi.dll.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • en-US/ieinstal.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • en-US/iexplore.exe.mui
    .dll windows:10 windows x86 arch:x86


    Headers

    Sections

  • setup/Extensions/external_extensions.json
  • setup/MEIPreload/manifest.json
  • setup/MEIPreload/preloaded_data.pb
  • setup/PdfPreview/PdfPreviewHandler.dll
    .dll windows:10 windows x64 arch:x64

    3d5da91f7399a4896ae98aae7981d482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/dual_engine_adapter_x64.dll
    .dll windows:10 windows x64 arch:x64

    15ff7f8126bfb596aa72030f98a27424


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections