INQUIRY RFQ 50248987[.]exe | Triage

Resubmissions

18/01/2024, 23:02

240118-2z5ahaeff9 10

18/01/2024, 08:55

240118-kvka4agcfr 10

Sharing

Copy URL Twitter E-mail

General

Target

INQUIRY RFQ 50248987.exe
Size

506KB
MD5

a7a97bb52b9efa07c9e456343623d485
SHA1

fe5f49805cd999c9b087b3094595670d9e0a0563
SHA256

973ec66ffa4d4679e5efc85f9f4b92c8a17a3b6a41d789a6c976edbca3d6ebd6
SHA512

b938bd8fa9dc3faa01efef46c3278b3f1ab3ddc46e15ebff9c98be6395f4957411450163b99bbbe7d5f1ceb22937ee1486a9899ef44e1b47143103bd090cfa1c
SSDEEP

12288:A8JgnWNa8QRb02xUKhWNZ85gcsksVkkB16rsazaKeq1i7i:PaWNa8CIKHSTFbB16MqA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INQUIRY RFQ 50248987.exe

Files

INQUIRY RFQ 50248987.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ