InquirySpecification28060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InquirySpecification28060.exe
Size

821KB
MD5

a218eda854cb00cf201029e2f574fcb6
SHA1

fffba41e035c8d9d41446caaeec0f9956c1ad048
SHA256

1b6b62b3f96553b8800f1c2c38ef1dde521a149715534f1fa19d02a9df8722bf
SHA512

f16c77fd6078a995500bde819dd848c6e4acfd4f744d1cb8fc9b14984d74e1645cace1b488c4f14d8abf9b5d18ca60c85145e9b58e9a9f9dcd71f1d7984701bd
SSDEEP

12288:Zqtlu96FG24mhC79JIc9gJYJcmuf4vcfKKGqCO:jBQC7L82U4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InquirySpecification28060.exe

Files

InquirySpecification28060.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 653KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ