ENQUIRY[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ENQUIRY.rar
Size

491KB
MD5

79fdb2b7ecf967a79b24fdbc17e0e343
SHA1

4dc8c8edfc94fc31904c32009e6927f474c8ef8e
SHA256

a7fc4e0ed36dfd894b97bab7088c857eec4fa795b81b53293892813d907a8a65
SHA512

a03b7042e912c0b3f2473bd294a511b76cba14d88156d5122b3e8d537bba63dfd21c42f8a99aac9c5f859ece6764de08f5d8eee00c87c56d9455d9e07907cab3
SSDEEP

12288:dM8ZSbEowYeqjYK4bQby1C+lXVq3zlbz8pbq5V/w//jAnBYemu:hUEoLeVdQbyBlX0V8GPw//jABYeN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ENQUIRY.exe

Files

ENQUIRY.rar
.rar
ENQUIRY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ