Booking Information[.]7z | Triage

Resubmissions

01/03/2023, 10:13

230301-l851dsfg42 1

28/02/2023, 10:06

230228-l5cjnsae3t 1

Sharing

Copy URL Twitter E-mail

General

Target

Booking Information.7z
Size

538KB
MD5

6cc798249343310071329f2505937c24
SHA1

bf04ccc43d57a6ba158dd32dbe8b2fc69539ecbc
SHA256

4d12b9dc3abe7b7660828ee452e411a0acb0a57beb81e7dcb23d5ccec175bfdb
SHA512

a13edced2ef081005e430831dd9e9619f3985236230d043b534579484e7aac11bc41fbd520cd7ac328258ccf561fb76541c2b8ba9af1eec4e29a068850a44480
SSDEEP

12288:RdTnS1n+PufdX3qYEw06ydo2gQwsAcGGGKWp6d3p9iA:fTnS1+eXj0Pd2EGGpzviA

Score

1^/10

Malware Config

Signatures

Files

Booking Information.7z
.rar
Booking Information.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 522KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ