Overview

overview

10

Static

static

3

Confirm Bookings.exe

windows7-x64

10

Confirm Bookings.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b4a881c85e6504cdb22c83a43ddd235.bin

  • Size

    624KB

  • MD5

    0e7fd27cdc86ca77585e30d651fb9aa3

  • SHA1

    498337f6cc4a21b9a2c18d181bade4970f608239

  • SHA256

    1dc11c418fc347c4b365582b49e7c2fbaef14b0c7b696755012e2560a02ff85b

  • SHA512

    d6784a91fc17b5472d4e401d799c90bea756acbb131f39ce7148dcc362553611a6425763894c9655f43382c96b6606620c5b3ba42682c2fd54dfd76712ef46f8

  • SSDEEP

    12288:CHxQLBFKDg3OXgnVzMBQR/z0jU8PI3JKlgFw7wpaEwlcfyqQzGiy:COVCg3qgMQR/IjU13Ih7wpZqqhn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b4a881c85e6504cdb22c83a43ddd235.bin
    .zip

    Password: infected

  • f31b2ce67f630eee150009047da660d3c3ba799c26f06a170fce255c5cf22e39.rar
    .rar

    Password: infected

  • Confirm Bookings.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections