Static task
static1
Behavioral task
behavioral1
Sample
itinerary_1719382117.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
itinerary_1719382117.exe
Resource
win10v2004-20240611-en
General
-
Target
itinerary_1719382117.exe
-
Size
213KB
-
MD5
3cad1815879b2ca1fe7f2c5ea0f93fc3
-
SHA1
a66382098a770467ebe22de0d577ca2cc195dd9a
-
SHA256
4a3e7e5e655ad7c52be676611a813bbf1430006a3045f3b5c90bfc9cc2320b30
-
SHA512
99fab19b82d6e3a1d072dc42e6ca28c9f70835ba1a26eb1fd668ef1aa2ca1bce283392fa994d98c2988568f4e5e3685ffdaecfe4e1340e3b734798f0fc51ec5c
-
SSDEEP
3072:lop0LHINQBVU4Wr1m9s+NNx6PQ8bSncr1cKffB+TQ9D+2fE6vrxo91mLEBnFisgV:ygINQ7UL89sSnmcKffEsrfx8odj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource itinerary_1719382117.exe
Files
-
itinerary_1719382117.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ