Static task
static1
Behavioral task
behavioral1
Sample
INQUIRY.pdf.exe
Resource
win7-20230831-en
General
-
Target
JC_22d30923cb3732fa597ebba3452363f81b83b906c6c3c91d5a94d233ed240574
-
Size
552KB
-
MD5
ccd119843ea2389ff1dd9ea4b02b1925
-
SHA1
e37db1f9ae1ba33ffc847b1fd6da7544241f16ac
-
SHA256
22d30923cb3732fa597ebba3452363f81b83b906c6c3c91d5a94d233ed240574
-
SHA512
fa4a175e2a3af208e00c3eeb2f734c98c009d89d7d7d408a22f9fe554350ad5410084c6e70477837f60b043c7d245f795423b39a8877352f7e57e4846a8e02f8
-
SSDEEP
12288:pd28BgtAfS2OV3UVcuSltmU8cVrADCcIwvyxDmrJ3g4eKU:DTGaqTVSJS8rDCTmrNg1KU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INQUIRY.pdf.exe
Files
-
JC_22d30923cb3732fa597ebba3452363f81b83b906c6c3c91d5a94d233ed240574.rar
-
INQUIRY.pdf.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 628KB - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ