Inquiry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Inquiry.exe
Size

906.0MB
MD5

cf0111ee67d26ef5a128de4036224463
SHA1

3da4b96044f2c550bdcaed853069fba9b1927fec
SHA256

fe75e2df1b0ea4782957c693313b1addb6e3186c43a6731073dc831a153b413a
SHA512

fbc698bf169a615e0f401e18a02432ee24050825d836363c36f3dec31e58ef1ccba413f5a180803cdfc2f35c55cde01b4806a6d4aa872c9656bbe1e7cec8b058
SSDEEP

12288:RVbsZeA57o7gzlkpCdyx1KTsDpc4nDzHaJoixrbMr+P8cSDMX3Ig1N0r8Ma:RhskgHp2CdyxsDgDGoibziQoa0da

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Inquiry.exe

Files

Inquiry.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ