Booking_information[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Booking_information.exe
Size

15.3MB
MD5

24ba06fd80a3f7f185804ae0b8de0682
SHA1

39d6e082f6ba0f6aa39bce1f3d7b6a170e2c8735
SHA256

62965ede7fb18da03117ed2c18e0dd4eae466777f2db13b781e124fae5762336
SHA512

7f3d9462fe6271c66ac1df6ad7bdee4ff9ed5ed98a7e47a02b591183e521498bd87208252e19d3051b4b1d8f53ae96d4c17789b72563535130842fcb59676949
SSDEEP

393216:NXhDPJYS6k0nXDpF0j5tjfm3fp/ReKWNBZIJ9BTeBH7cHIS6YWJO/wp0Q:NXhTJLOX9FOjfUR/UKWNB+Bo7cHID0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Booking_information.exe

Files

Booking_information.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.2MB - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ