Inquiry for products[.]exe | Triage

Sharing

General

Target

Inquiry for products.exe
Size

915KB
MD5

a47faf7cb38ad735b20e84eba0891316
SHA1

b6d73ed96014c971309d3a287a2626f332a7cd59
SHA256

1a90138e87d6691efc22705cfd6b4003a434a5b55125b0c6663ef39206a501f1
SHA512

47bc10bd0c3e5ba6ac246ff7f74e03e7aced9a36a91d964c7d6c7c6a3c67f45752dde77f9e54a15526974b80102de77f56c8d99c6faf88fd3d1de8905b7856e8
SSDEEP

12288:FqBnLZvNKl1/tvMh1H2VvMYiC1FAwRpl/m8+GmGa:Fq93KlZtEhVy1Tl/sG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Inquiry for products.exe

Files

Inquiry for products.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ