Static task
static1
Behavioral task
behavioral1
Sample
travel itinerary.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
travel itinerary.exe
Resource
win10v2004-20221111-en
General
-
Target
262F89154949A9F8D41B8FDB4DE1013F897E60AB83225F8F35783BEE6A1D6557
-
Size
888KB
-
MD5
f8430b32c4c0f837a21c81768df478dd
-
SHA1
48254b36f8507f1233779d9095eab1abbff6eaa6
-
SHA256
262f89154949a9f8d41b8fdb4de1013f897e60ab83225f8f35783bee6a1d6557
-
SHA512
25627d07193ecba40553e7ff07d131efc73af7eecec260a76de0af26c5bdddc934490887795945aadf78385d81758acab841ab6569bb652494b1a9041143b951
-
SSDEEP
12288:jd8qzJYIdqw2RKxMd6AJWws9+xLhxEWzPRWA2y70:B8qNYIJ2QK6AkwsMHzPQA2x
Malware Config
Signatures
Files
-
262F89154949A9F8D41B8FDB4DE1013F897E60AB83225F8F35783BEE6A1D6557.zip
-
travel itinerary.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 526KB - Virtual size: 526KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ