Static task
static1
Behavioral task
behavioral1
Sample
Product Inquiry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Product Inquiry.exe
Resource
win10v2004-20240508-en
General
-
Target
Product Inquiry_1.zip
-
Size
672KB
-
MD5
226079b332e7103cdcac4e43b8213333
-
SHA1
e35be64426ce38cffa11535a626766792f5cf6d2
-
SHA256
5fe9d9fe3bfc4ea4491eea547ee031b03af2b2c3c246b63a1127859e253bcdea
-
SHA512
89eb3b6d5e5aec22090c59a6ab7a039dc2399b168e5a01048c9d53184215c0f93663200e8e0292a3896b74939ec4f975ea689d2ac93992e90401da1742eb9604
-
SSDEEP
12288:5g2peVqIJBgnT449kAZ369awegDLpKRbgbBbh300Kk6nfA4882PhSPXkUJ9l/Wfc:5tpV0+V9VwfHpKR0Jhl48BPhjUt/mob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Product Inquiry.exe
Files
-
Product Inquiry_1.zip.zip
-
Product Inquiry.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 693KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ