INQUIRY[.]rar | Triage™

General

Target
INQUIRY.rar
Size 638KB
Sample230619-hxmswscc66
SHA256 4ff53d51192c6ea0c793cb31e4f9846f8cd443deb3d4b18b24ceab48a62adaa7
MD5 93e14766707f806751e89600c19ccd98
SHA1 d257d23fddf5d7e511233ae9c15e07b5abe951bb
SHA512 7f3c4d0fe67a656d7f7838d603a5a4c8184675d36cb569754e7a6e603af3a8d960401f4d336fb097a815ff8a69184a9947964c27abb9dd354f11bec1272d0948
SSDEEP 12288:xcZlnuVqYIWAbHxLPZM6tWR+ddf+09O28KU8quunYA0gohm:wBaqYMbHpZM6QRIzB8FiA5ohm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4G0xbEmwg31JViE.exe

File Explorer

INQUIRY.rar

.rar 638KB
4G0xbEmwg31JViE.exe

.exe 1.0MB

INQUIRY.rar

SHA256 4ff53d51192c6ea0c793cb31e4f9846f8cd443deb3d4b18b24ceab48a62adaa7
MD5 93e14766707f806751e89600c19ccd98
SHA1 d257d23fddf5d7e511233ae9c15e07b5abe951bb
SHA512 7f3c4d0fe67a656d7f7838d603a5a4c8184675d36cb569754e7a6e603af3a8d960401f4d336fb097a815ff8a69184a9947964c27abb9dd354f11bec1272d0948
SSDEEP 12288:xcZlnuVqYIWAbHxLPZM6tWR+ddf+09O28KU8quunYA0gohm:wBaqYMbHpZM6QRIzB8FiA5ohm
MD5 SHA1 SHA512 SSDEEP

4G0xbEmwg31JViE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 885a126d8abff2e4d272e8df02fb03d836ba078053dc55257860780b0b4b05fa
MD5 4a0c38978e277596499f7bb5461b5d6b
SHA1 62ead013f5286f1ec319a23b3d939671195f4f3b
SHA512 e64443f20b088157cfe3fbb76fd293fcc12388e315682a6169f227da6197f8d8d017828af4c293a5ea90f3fadf80c637e14f57831fd0fdc0ccb5760778af8326
SSDEEP 12288:clDiGvTq4H+vh9IaBTQTGUH8xa5/3uy/OI/C/1i/lh/bn/mG/Gf/24/4d/Is///X:qota5FuQENLvuQzGqz4Od+I/YY7
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1067550

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing