Static task
static1
Behavioral task
behavioral1
Sample
INQUIRY PRO-000001.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
INQUIRY PRO-000001.exe
Resource
win10v2004-20230220-en
General
-
Target
INQUIRY PRO-000001.exe
-
Size
617KB
-
MD5
63d4dee76cca9b1d9926f4beb9f5a43f
-
SHA1
c6e55b0cf1e6bd6d00d05c3778e40073ee95c7ab
-
SHA256
c865e55fcf79bd4a9bae35979e4676c7e77e06afc7c136a73623b395a67f99db
-
SHA512
7582e6be423309c09548439fb8d8abc9668c1d49293f05b0540e345ac7822bbe0da70dfb17ffda88587ffd42f4acc925f1134e4b504e0d8a686636e55eb4833b
-
SSDEEP
12288:3+nOsn12fegrscvNfTEQoSRSF65Vd86J2rAC9Ub26pP9/s:U/gLN4OVYxySI9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource INQUIRY PRO-000001.exe
Files
-
INQUIRY PRO-000001.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 603KB - Virtual size: 602KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ