New Inquiry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Inquiry.exe
Size

705KB
MD5

0528e3454653e6e14da1da0231d9368d
SHA1

05ddc566a631d838c791698fc5ccd1a95fbe4fb1
SHA256

b3fac580e11f2a319aa3a2122fa47f08dee0d8c8bb1967cc5b0a548493de7781
SHA512

2fc0f1a386a935b92e46b0bd60c1e110df6f5b260af3701d7a7230355853a2f5980514873816b723d36fcd0f20943f297d79376962c13185408a275d4aa0ec6b
SSDEEP

12288:HsIdul2iNfmFx2iqNhujGjU7z7LBtycsl6SJVMnoaMhH0Ruv0L4S2qINpxQSBxMI:HsIdul1lmFxUmLxsMOVEoasBvc7INpOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Inquiry.exe

Files

New Inquiry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ