Products_inquiryTWRIIPO2024[.]exe | Triage

Resubmissions

28/06/2024, 13:35

240628-qv2s2asckc 3

28/06/2024, 13:32

240628-qtcgrasbnb 3

Sharing

General

Target

Products_inquiryTWRIIPO2024.exe
Size

807KB
MD5

ea7d82eac9da73b9e56498cdaf425b47
SHA1

56547e38aa26df0184d01f646847c6d7052a816c
SHA256

72c3efd5648a00a38e8b953a72d36ba898debe5fee560f357a3e1ecae783deae
SHA512

bab7986f44598c23bc0cca1fd857d359acf1eae19c8dc0be0d9c21d4fb737b3afbad47b1bc8981c83c137076b7297cdb88cb53fdc3c15d39ef36d16cb0e8ed26
SSDEEP

12288:T2LX8Oi9JhhYJ9afSJilkp38DF3RPt16Q4/rBGz5fnlx37iLrv:CM9jQ9afSqkp3SRPH2/W5PD0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Products_inquiryTWRIIPO2024.exe

Files

Products_inquiryTWRIIPO2024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tQVC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ