Static task
static1
Behavioral task
behavioral1
Sample
Inquiry_PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Inquiry_PDF.exe
Resource
win10v2004-20240426-en
General
-
Target
815640a2bb98ff536e4b97a7df4d2a427cc985301ebb0fa8e62a10854cd28762
-
Size
638KB
-
MD5
279e2567cb12c6629a3deb7700b159ef
-
SHA1
ebc5aa4e9481655343bd23448eb8c59c96f2ebd2
-
SHA256
815640a2bb98ff536e4b97a7df4d2a427cc985301ebb0fa8e62a10854cd28762
-
SHA512
1f2b28fc16e60b4ab0f4c4510f73b39ac8c4a3736fad40f4a4e547dd93e1459fdd3049028266f3fecd212fb51563d5f8426a9ff1651b17b340e49d21e38cf312
-
SSDEEP
12288:xJYnUN1CmDAWEDFzUGnIsZ/grp84Nj0D08gtxrohlik2eDJjUz9I55/k+286iCNr:XYk1CmDMCXq6pt2ErohlnDpUBI55s+yd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Inquiry_PDF.exe
Files
-
815640a2bb98ff536e4b97a7df4d2a427cc985301ebb0fa8e62a10854cd28762.zip
-
Inquiry_PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ