Static task
static1
Behavioral task
behavioral1
Sample
Product Inquiry.exe
Resource
win7-20231129-en
General
-
Target
6d11fc6ab95eda61c3a3fdf4743f4593f60acf48220ed398432756c159d8b363
-
Size
610KB
-
MD5
06c4eca63f1816ee76e02747315c740e
-
SHA1
6808d6738c70b54ccbb5384c8b95fcc6aad930f1
-
SHA256
6d11fc6ab95eda61c3a3fdf4743f4593f60acf48220ed398432756c159d8b363
-
SHA512
167e38fb6187d997191599cd3f6b99aaac369bb3c5594f4d2ddd07376b6519eab5a033a0573df5c838f21d4c8becd3dad12b6119ddd633b69d06362839f62f3d
-
SSDEEP
12288:CoNn68xWe0kORAE/c5zS7zCbRZlvZF8urSAeGOKCfocTCIk:CoNn68ZZORjcs7zCbRZlvZ+urSAeGOKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/Product Inquiry.exe
Files
-
6d11fc6ab95eda61c3a3fdf4743f4593f60acf48220ed398432756c159d8b363.zip
-
Product Inquiry.7z.zip.zip
-
Product Inquiry.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 646KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ