Static task
static1
Behavioral task
behavioral1
Sample
Enquiry_3042023.exe
Resource
win7-20230703-en
General
-
Target
Enquiry_3042023.exe
-
Size
721KB
-
MD5
76fbd1c83c790dcc43ae1d8a34ee3438
-
SHA1
04b75a9c4f8e1ae628662d6ce0372597758f9612
-
SHA256
aafd16655157dc194683021e605766a030e2d4d46462ad37b723d1f1f834bf98
-
SHA512
eeee690099d6e9cd77039f912b798cb2bf03406f9fdb31c6a83807b5e045591fcc724b78bdb2347623b7a5728e253126bdd5af33d8a700a13682e6d1f9c615fb
-
SSDEEP
12288:yDm02iNfMXaV0dec+NI9FwSAkBLvNTJ5kZQKIbNL4w:S15YI0decv9d7V5kZQKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Enquiry_3042023.exe
Files
-
Enquiry_3042023.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ