Release pending bookings[.]exe | Triage

Resubmissions

07/10/2023, 19:16

231007-xy7l1seg4y 10

07/10/2023, 19:12

231007-xwwfzaeg3t 10

Sharing

Copy URL Twitter E-mail

General

Target

Release pending bookings.exe
Size

662KB
MD5

905c6dacec04653f241e6c68f7f01a02
SHA1

e4bcf92f9f6f7a9766b68ddaa13af361be1286dc
SHA256

f9a4e3002fdbcd93464f38fc49bebadbcc0417454c702e8298cf245fc751eee9
SHA512

896f2c1bbb430b9381a82e4690e1bba46b0a39198b19b9c4fa69b17c7553be2b60a6b3128cebe218c43061e0ba98c749a4f96dfbc728f2c88be9b30b748d7575
SSDEEP

12288:UG+/jlkJUND9Qkie1VUVZeczcvtDgdL82SNNqu+swUJ9U8bl:v+LlQkzURKDgl82SvH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Release pending bookings.exe

Files

Release pending bookings.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ