TravelAgent[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TravelAgent.exe
Size

92KB
MD5

4ac917ce4ead0025938a5bb62d564b99
SHA1

53172254b1bc2cba0c827b4c50650d7311096fdd
SHA256

ffe42a6c879740b980bd254641905fa209c74d2e8f3038d9e872b19f7072443f
SHA512

6a0d658c343128b8e7a9ff70901804717aca2b91f7cacc4cf3e20728192c76190c98347566ea37ca27265dfdb96dd6c7ed11fda988c5d597d7e1f4f6ac7cc9ff
SSDEEP

1536:BNMRU4D2g2tD2gVQMLpULQD2gSDrMJ8AKBwYD2:PMvyRty4hLpULQyFDYUOYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TravelAgent.exe

Files

TravelAgent.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ