ENQUIRY[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ENQUIRY.exe
Size

604KB
MD5

4328029056a6919f0e3fed91e89ff2fa
SHA1

8522d89c003e5287102eb9b4f6162a5d7c5556dd
SHA256

a782d89a06f36333a3e7370c6b535d5dfb518edfed64e660d989de3b53b207fa
SHA512

0c3d6fd8cd67cd2bafb774a785f1ccbcaf11beb7543a3858f7d3df0cfc415109f4bfc24ba0f994ed27990c8c896fc2206b9ea96cb336a326dcc8a137b5453670
SSDEEP

12288:ENj5AyHaYpvZrGNdkwQyLtfCzMThyQnxT2sE6Dn7j3/9tI/GRIUNq:E34YRGdkwQjITxc6r92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ENQUIRY.exe

Files

ENQUIRY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ