ETD BOOKING[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ETD BOOKING.exe
Size

1.1MB
MD5

89134dae76a98edca756b5892aacdba2
SHA1

15b3f34bd361e39d3cb522c9e8120fc7e055143d
SHA256

a13965b5f385a160cf193d11fa1d99392ad147237652a10a1405c0cd10d49b18
SHA512

bc4eb09a37c3c7262e0d49ff604af1b4c788dddf616399b4ff63c7b9cc92fb12031d0908c9c7639e4872cce52e08c96953a3f5ae49c17dc9b51832c06cd2fa63
SSDEEP

24576:BWQSGvnz/+XCK3OySCrlzTYZYINbKiQQUn/Y3a:QuvnqvlzMnNIb

Score

N/A

Malware Config

Signatures

Files

ETD BOOKING.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ