cargo-partner Air BOOKING FORM[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cargo-partner Air BOOKING FORM.exe
Size

781KB
MD5

0a3e588833cf9724ee2ef0f62c5800d3
SHA1

da941595c505de1cae316202d5246aee693c6b2a
SHA256

eb6ac5c1adc4a760d3632874fd1ce4299e761023a5afedeaffdcf27009d185b8
SHA512

2f16b7c5d62db5e3e07ed32e77dd8e1ba6bead3f89cd11fd4005ba5e9467a6d21a2f73f7607b228e09e695357a8eb48a77cb5b2ad02e986eb09579fccd8beb54
SSDEEP

12288:9U7LnM2Nt53sKrj2GweyjF2nDduat2PNtbshujZgaZaBlsgs:G2GwHR02PNWQRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cargo-partner Air BOOKING FORM.exe

Files

cargo-partner Air BOOKING FORM.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ