Inquiry[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Inquiry.rar
Size

674KB
MD5

b7526aa5e854089f07254c1163409586
SHA1

c42ee9ca896fc3e72c71a062a836cd5b47ae3494
SHA256

37865bf48217ebc88be2de119be76f056c31aa7d762bbba4ece1abdf2c775aca
SHA512

3986c89c49da403e45652504511f3eb6381242313ba5295fe23b5987f0c6158e5f4fa7f1e7666558b4a61d455d587b30b1f8edf2cd103144b1688a847e107056
SSDEEP

12288:Wdf8GL6dCr/zu82Z6jAi7ooQhlQPBqx09k9ffc779to8VV:Wl5r/z2xbQI069Xc7xF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Inquiry.exe

Files

Inquiry.rar
.rar
Inquiry.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

KeTS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ