ca01c46f20de4bd6a4cd857a8b87d74a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca01c46f20de4bd6a4cd857a8b87d74a
Size

933KB
MD5

ca01c46f20de4bd6a4cd857a8b87d74a
SHA1

b9261d48c43d506e8d7624829281452b6e22f8c2
SHA256

046da8690bcb8a547c19006652075bf5ab86238c221bcbe7b713526afdc7c85d
SHA512

789e0a9bcd57cb04cad2c86f2961a55654e1d8f45215742d218a61cc2ae8cd29373b3898a12f91d10554916126c245fc940c8fbb989b5e4a69405f439e6c8481
SSDEEP

12288:D1r3VT5qsMQGvTAIpQ7Dbt1oWtxFF3iydIMZQ93mvYLetRGJ2vIXXyf740n1iW+:tFK/lpQf3vxXN3k3mvLQ6IXcPn1iW+

Score

1^/10

Malware Config

Signatures

N/A. 1 IoCs

N/A.

resource	yara_rule
sample	dropper_html

Files

ca01c46f20de4bd6a4cd857a8b87d74a
.eml
Booking details.rar
.rar
Booking details.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html