Product Inquiry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Product Inquiry.exe
Size

753KB
MD5

c6a74fbf100cfd67ea4fa6da9b819093
SHA1

9432af1405493a9c03c2fbe5627befafbfefcd86
SHA256

85b3c9f10a8f1e3aee3d393260f82c7dcf8d23dcd899117f0394f6a9f0fdc7fd
SHA512

c02383d4056ec800ad6a187f419de64196cbee56925232385823f5b1c8f6efced88521809786f7e5cd2fb43ecf2dd6cd472a13bb08e1946f41ee7e8e5eabdaa4
SSDEEP

12288:vd6L7PV3ffiobhaDnLMzIL2q+RTdOL8PPTCrLcLUVnQh5pGnSxxcVhpXcwJbbxCo:gOyqGUL8H2cLFQA4pXcwDCX8fhUW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Product Inquiry.exe

Files

Product Inquiry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ