Inquiry_EC8112KW3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Inquiry_EC8112KW3.exe
Size

848KB
MD5

9c23381c2a5470f2d025fc1add1c8d03
SHA1

fef77e0e1c8b5695b23c14b713f65f70e315a19f
SHA256

2deb6ee58cf11a940854730c33d0af2c0e36f5f1ab8d25e6a28961464eababbb
SHA512

87e465e97b35a0cd3dca40bf1ffff49c6b0f9801f0c8949b34917c102ed7668413de9bfbdf2178cbbc6ebb82af5b8f7aa18abbdb07643e8b65a74f3b79162284
SSDEEP

12288:iWc/bUYIsYolnOBr1GzgzHJfSjPAHaq3i9hwFwbdppG2HVfx0:xiXrYowfGmJfS8H1ADpsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Inquiry_EC8112KW3.exe

Files

Inquiry_EC8112KW3.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ