ENQs[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ENQs.exe
Size

676KB
MD5

13aedce38d8c0e95dcca37806c0ede7d
SHA1

df375c5a846e6f52fc806fe13b800170fea040ed
SHA256

dea2eee60b2f932557806044485e6ed4dbb1369acf6a28880251ffcdd68d80b5
SHA512

b8a78c4141629b4b392fe88d675530d3c92755dd0aea26f6f643d941cb6c5caa566193ddf5d5118740552ee39b49a4debae0a0203c62b42c8f61ac4fd75876dc
SSDEEP

12288:TlBO5ZZC/W2n9ffrpE2TFLVT+iah5Rk+mcMGzF5YvwXJsoH4m4issazv8XmCDm:TlqTC/f1ddR+rh5RzMRvwWi49issH5

Score

1^/10

Malware Config

Signatures

Files

ENQs.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ