flight details[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

flight details.zip
Size

642KB
MD5

5bb95a57721de1f47c19f1402d0e7549
SHA1

ce50036194c891e99e050feafaf1c6845eb8ff65
SHA256

33a57f6e9dd6437fea04957d8561a1f71fdad2e47244e0d51fbefa134bc42244
SHA512

07cdd5474fbd64c5d35b795cf5095f381d3bf4d402b552a79710023b4a5f82df5f152a5a1f77e3afcccf1d7e1951cddd4425b84b1e616ce7377558202f0a4395
SSDEEP

12288:2r65O/oLt7mJUxVP4DdPJzSgPRrKFxrNSKomIRTMiZZBNv8CEdxGXQS7Lw:H5OwLVXOdPBS0KbpST/RTbBNvz97c

Score

N/A

Malware Config

Signatures

Files

flight details.zip
.zip
flight details.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 907KB - Virtual size: 907KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ