BookingDetails[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BookingDetails.exe
Size

7.0MB
MD5

a0a147aae768c2d27747851de572dd4e
SHA1

01dadb1a52c3ee0e487ee48e734b359a40b7742e
SHA256

63716380546685be1c999587864bd6fc981cb597e030f807a6be50c2b0150793
SHA512

2eeaad5c9d6fa0a633c75e52db8f63cb3de91db852db697f8c6f535ea94d21422ade189c058bf3708303b5577520ae763084fd3f5c1c424f15f1d4f2ad312d84
SSDEEP

98304:3AkSLissnaXEyOl0mRkBMEus8Qqgup7rFRBdAx5tpYQiOy9oC4NTzehBjbP9DaFQ:35yi8XvdmCbsldAxpvI9r4daXJ8SjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BookingDetails.exe

Files

BookingDetails.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ