Static task
static1
Behavioral task
behavioral1
Sample
ENQ..exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ENQ..exe
Resource
win10v2004-20231025-en
General
-
Target
9ee114ac917b6d91853cea593871194eb9f9672e695ace51d8f696be591c9805
-
Size
17KB
-
MD5
0425ae111404e91061e26c2d408c660d
-
SHA1
9a8abf467d20f704939c7b15199482aac0e277a8
-
SHA256
9ee114ac917b6d91853cea593871194eb9f9672e695ace51d8f696be591c9805
-
SHA512
3da4332602e60e24d485ab46b7892b966de7fbf2f10ec148647f44ec040ade191ba4397fcdd4818525ab31338e76ce5eeeee245438425c398558660e8bdf53ac
-
SSDEEP
384:+NRSg0gu3PB3XNBFHaxCtJ+UXZduEAMFq/NBHWhB85ZM2isl5TdsSd+g:+NRegu3PBnNBFHPJzJ7WPH/Dd5RsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ENQ..exe
Files
-
9ee114ac917b6d91853cea593871194eb9f9672e695ace51d8f696be591c9805.zip
-
ENQ..exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ