Packing List and Booking Form[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Packing List and Booking Form.exe
Size

541KB
MD5

decb86294bdc9452d5751b00a7e78f62
SHA1

467cf2a2589e55b5df9ee8ce767322db63697359
SHA256

fea79a1ff59d69800b423427fd0aee002a1f2480ba58fcaeea211292ede4f5d7
SHA512

3fad514eda2addfc04a154fe714ff11e64c3aaa441198fa6de96b57f41a79b3aa5c0fe8d8b81748e9eb46e4fda39c9bc6abafb24a3934d0b9af9860683ea84f1
SSDEEP

12288:1vLL9bW9ez8puUscJJCd7EbTq5Lh042K/jrw23FcyFm20/:1TL9iy8q4JCdcYVS6T3FfJ0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Packing List and Booking Form.exe

Files

Packing List and Booking Form.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ