booking details[.]exe | Triage

Sharing

General

Target

booking details.exe
Size

885KB
MD5

d2eb64b7d05d8dc10f483bb2b782a1bf
SHA1

c7895200aad6ca2acc99940181dc659fbdd3318b
SHA256

593a13e38304070acd5ce051db57ad78901ca6a978dd0bb2c105cfc7d9693578
SHA512

240210038e3a309e10606a1c91d96e79ac259b1c747e021d4f569a7b82bc79be3ba63e4c9f27f5992b01c8b31c27b1642faa853e42ae94808ac4bc8d5de22d47
SSDEEP

6144:IzxM7z59EDMMTTxTy+AtiJdsJ57gyxmrpzL2qwKUyyQSnXF9Vw9i4mdYSlOrMT:IzxQ5MTTxTQtY+J5OVXjtRXSXPlChMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
booking details.exe

Files

booking details.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 875KB - Virtual size: 875KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ