Purchase Inquiry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Inquiry.exe
Size

744KB
MD5

f62cdcff02e2f6e40a3c0c9cc4eb6b78
SHA1

251d066607ec2854243722f3fc5833442a87dfaf
SHA256

3d0cda77eaf8224fa5caaa69d066065b76e1a6ce3f0cea975e9533c9487d481c
SHA512

b88f96318de28dd3a246ff9636a667359942d9ff92c98e674a9534e62f62c4b389fc66a37eb0afa553c42de3bfdea4aa7d34b720a24201901256a741e06fab0f
SSDEEP

12288:nWB1oVeonr0pPykcG5Mjkk6ZyiLL2ip/xgZn/hqCjPUjQ/k801gRfv9:so5r0hVKZsTLCK/xgN/5388xRfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Inquiry.exe

Files

Purchase Inquiry.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HObg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ