Static task
static1
Behavioral task
behavioral1
Sample
Travel Agency.exe
Resource
win7-20240708-en
General
-
Target
Travel Agency.Exe
-
Size
47KB
-
MD5
317b3672b23e381f9a37d7d6ec884bb0
-
SHA1
b4292272efafaa59a33c221302106fa0975834a1
-
SHA256
34646a46c7823387ef84784c27a8ddbecd27172c2c0d7774142b6c3bb294105e
-
SHA512
5c1b26880d93632b89ede918b4af690b2a2e536a15860ec0d6e0d4d4fbe1bc99f7bea291ab255e6d35d14082aaffd14786cb4ac6f73e303726f87af6577ac886
-
SSDEEP
768:9dnB0tCj9AhsM5eCibbvyLzY1n9bcNr6KcHwRc3lxnDXV/+LaFjjUf/L0OHFfmMZ:RT9AFiPvyLsZ9bcNr6KcHwRc3lBFwOUF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Travel Agency.Exe
Files
-
Travel Agency.Exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ