Static task
static1
Behavioral task
behavioral1
Sample
Hotel Managemente.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Hotel Managemente.exe
Resource
win10v2004-20220812-en
General
-
Target
Hotel Managemente.exe
-
Size
192KB
-
MD5
6236cd54bb64c3d3edb11bc3018250d7
-
SHA1
090bb750146daaea802d45f8181b93f752b30acc
-
SHA256
43ffb929d1fd1b5dd18e53b7f24e3abd2b95f7886e94e5d1c6f62f3f910dd977
-
SHA512
b1efeb6b38758de33c72310d59d17fd644364adea2434d79d61a55c5057a7abd79c0e5b3c5977868f6f5efcf1c092c583e70db49813a051827f9910c48d37830
-
SSDEEP
3072:VW6l78awqPcp8uM3RYtkXkEsGrWJYXvHdKHgJFl+w/rs:VC8uM7kEsWWJYXPdkgJF
Malware Config
Signatures
Files
-
Hotel Managemente.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ