New_Inquiry_Sample_Spec[.]xz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New_Inquiry_Sample_Spec.xz
Size

726KB
MD5

897af6e6b9602f513f3debc114a30001
SHA1

b27c62509da296aa7c02621b6ee884ca5e967cbc
SHA256

7a70a7d5abf998fa7dd1612e8e7161057fd1f326011c6c17ed9b39dd916add81
SHA512

8ba1772db311751819026f34fc78767b290b50bd0e5488fe549f60fa3ec164af036e237d98223a7052e2b8eb896969e29b66082af132b7051c86db7440751e05
SSDEEP

12288:nHME7WBVm9DWRtXsOipCeDQDy6McErTGMfPJcWjsvoH+l1bQOdKIY7R:nsESVmgoMe0DUrTGMHJcBGMKNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New_Inquiry_Sample_Spec..exe

Files

New_Inquiry_Sample_Spec.xz
.zip
New_Inquiry_Sample_Spec..exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 745KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ