INQUIRY PDF[.]tgz[.]gz | Triage

Sharing

General

Target

INQUIRY PDF.tgz.gz
Size

1.5MB
MD5

88b93edb04dbfb83cfc33cb4f930e521
SHA1

9b8a4371622fc8ac62708846941c0e38bbd1b2b2
SHA256

2d1518e380ad0097d9e3b182bba0d826ffb26000e4aac79000ce3d0df6a8e270
SHA512

b5d27f0440ad26fa138c9364b99d1f8476cad450f95ec94e18d3d5e01617bdbb8fa3630392572edaf3d9b3a6a3824984c7334a922df32cede2c72f92140fd56e
SSDEEP

12288:FwQ/7vpVvPyWI9tF6mKz6bmXD4bqFR/P9WgIM:KQjpVXyLD6ibMkeFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack002/JTIpTAyy1lSKDJd.exe

Files

INQUIRY PDF.tgz.gz
.gz
sample
.tar
JTIpTAyy1lSKDJd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ