Static task
static1
Behavioral task
behavioral1
Sample
INQUIRY.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
INQUIRY.exe
Resource
win10v2004-20240412-en
General
-
Target
INQUIRY.tgz
-
Size
1.4MB
-
MD5
6a44c7271f7b81512a7f5b11d011e515
-
SHA1
41c53af3c06581e2234d671f41d290862656a655
-
SHA256
80028ce14460d18d377ef2e8b22d039185547db7531467d32f4b10baffcfc071
-
SHA512
a401da4908ce7d6c5658d99e3bddd72b6faf413e515085b34413d34b6ce5984c415be5976de2f21e34e12739df2d4a7463113af0a0a3858354d0537482b13cfa
-
SSDEEP
12288:GW09a+5uqZTHbhAOZ2ZlD/Z0rIVMcU+YSk2O6K4ciLMNgHZuM+3q5kI+tQ:GhU+t0OZilD/ycdUX12NK4cekWZukitQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/INQUIRY.exe
Files
-
INQUIRY.tgz.gz
-
sample.tar
-
INQUIRY.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ