Static task
static1
Behavioral task
behavioral1
Sample
INQUIRY_.exe
Resource
win7-20230831-en
General
-
Target
NEAS_JC.caf0c4ae3fd9bc5ba145148c8cc9c45a88e1eec070dc55a3f93c38c7098fb9d6img
-
Size
1.2MB
-
MD5
6f0e48cf77f6bca3da766d79598a117f
-
SHA1
19905e2dd533374ae363e245589a2e263ec998d8
-
SHA256
caf0c4ae3fd9bc5ba145148c8cc9c45a88e1eec070dc55a3f93c38c7098fb9d6
-
SHA512
563b399a31a7917eac75fc3376bf3076d018f7eb91c63df65cf55620b7f749137dfcc1f989ec163bf81ce6e45d655ae75589f97e83a1046156d18bb76e6399d7
-
SSDEEP
24576:XWz7s9Bn1vx/ErfApJnBte9zJnozeLh8YCn:XmMn1vxMEp4tnoz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INQUIRY_.EXE
Files
-
NEAS_JC.caf0c4ae3fd9bc5ba145148c8cc9c45a88e1eec070dc55a3f93c38c7098fb9d6img.iso
-
INQUIRY_.EXE.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 679KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ