PURCHASE INQUIRY[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASE INQUIRY.rar
Size

590KB
MD5

c7f2bf73e1e75c7dc58630ac32cfbe33
SHA1

edcc49a395f759edb6e30654a8f14468ee1becf7
SHA256

fa1370c93478c4c36538a5cfc30e9b20f55d42fe917dce68047bde3dba73d95a
SHA512

284c8281e6c24f89ff7e0098a2dca890b994146ea8ee1880c996f538011c310bce375d3c94a413b203036d795780f79c04f0686d974a5814e994ac2ce8b89f89
SSDEEP

12288:qCOTrJHh5PGT2UPCZF2aU9eTyYpuhLSQUXKlopwnobhijFxff+EEYJW086GQnfhO:qCAhh5+TDaZUvcyYpgzUampwobsB1GXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE INQUIRY.exe

Files

PURCHASE INQUIRY.rar
.rar
PURCHASE INQUIRY.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ