d5032a79b95be7ad05d38d1ae3c7f26f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5032a79b95be7ad05d38d1ae3c7f26f
Size

538KB
MD5

d5032a79b95be7ad05d38d1ae3c7f26f
SHA1

430594789e765a2e5a956d056a9868696160060c
SHA256

5da233d0af3767b7b5434003a6d6289750d09cfc8b984e2769f7643b7bba9e84
SHA512

1b37fae06360b707c958cf912ae0e7f6fbfccaf5943a58b4e7080fe04aa770c445a78ed3aabfe0407fd13faa6503bf8af4d1cb3906e0295dc5df1d68357f1b29
SSDEEP

12288:cNScfPpLsclvAUeG++/oZCJQxpjuikWFbatgJMnNiqRxA:cM+pL3lYp+Q9xpjuikW0jnQUxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ENQUIRIES.exe

Files

d5032a79b95be7ad05d38d1ae3c7f26f
.gz
ENQUIRIES.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Client\Temp\GxCHeJHCXF\src\obj\Debug\StaticArrayInitTypeSize.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 751KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ