NEW ENQUIRY 0424XX[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEW ENQUIRY 0424XX.rar
Size

625KB
MD5

b081889ac4d5f99e9f861d548ee0cc31
SHA1

2d8ddb765fd280e168d3467beaad9ab1e8a48a87
SHA256

aec7cdcbc780cd50f08afbd52413dfc8a994dab9894c3c26450cdfa3533da08e
SHA512

a06cccd15e491b2e4d1613f890424e5d0e37517b59cd398010abe0db7b1eecef846b7d4397fa71ef7b26541b247394997679ec44d66ed9504e5f95d104cdf8d1
SSDEEP

12288:b+OMhhTAb7Bo/bsaZkWDiBU5BcdsmYe1D3d/dlKY181iSoQB:KOMh2fBoD7lDiRCmYi3pvZ181PB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ENQUIRY 0424XX.exe

Files

NEW ENQUIRY 0424XX.rar
.rar
NEW ENQUIRY 0424XX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ