INQ2981PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INQ2981PDF.exe
Size

769KB
MD5

56506eca94fc2265ed1e1cac574a3396
SHA1

b6c54d272ad01cf43752d54a55798353f9172f54
SHA256

9dc3ae76e486e42a37e14a3097fa056b5b85d037bf0d00c400330b514059ed84
SHA512

3cd429c73379472ef35dda15b8498c2cb6c1f044911e67d0e4b5f23fc8b4d2ab9489d811a7c00ca87e408b9943fe813501dd66ef977064e6d05447e4f8d79a6a
SSDEEP

12288:4K40b5yzvbYmBHQeb8P2+g1Xwd/70oJUUWwMxxmoOBij33g71l9CLXLJaOJITKo5:BebY0RbsAo/70HU2bWBijn21l9CLbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INQ2981PDF.exe

Files

INQ2981PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 760KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ