EPPCO Inquiry #18300231606[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EPPCO Inquiry #18300231606.exe
Size

615KB
MD5

a671935aae69e8c2a1ee8b5c1c1f577d
SHA1

81a71e7bfbcfe20379b082af2cc66803ac006402
SHA256

4913dda08726dc0fcc3b36bb5daf24556364937a7c4950698e8f2cc0691aefc6
SHA512

c473a5fe0c8c94f825797e5170af4553257bb756746420b31829dec8f549495f4062fffb75653523e82b0b3093f37b4cbe3a43c27173e4c34ec483116a94c2eb
SSDEEP

12288:O5LbzIu9+r9kBo3+AnUQhObYyWo3eT3uXTINdVKjglo9YtAVZs5B:O5LA9d3BUQOObnS6tAE5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EPPCO Inquiry #18300231606.exe

Files

EPPCO Inquiry #18300231606.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ