Enquiry 88210103[.]rar | Triage

Sharing

General

Target

Enquiry 88210103.rar
Size

492KB
MD5

5ed07e40488110a5e6e23440dcb0dc6d
SHA1

852fbaae05f754995e44db60089869a7415c1240
SHA256

0d737e84a2f2b3d91744226d6b4a83b17e9205799f8efc703404839c308e3094
SHA512

3393f3eeff9bddcaad18d381e88c4595eb52ee2a3a3aa317b96aa2b44433c9c708e40c785fd7b00290d6d42d43005cf57cf7c011c0e93b0d6da6a1657e2ac415
SSDEEP

12288:KnJdugAqWCmPDE5oZANlQco33O/uaqXaizvV8U5NnS:KnJdJuDu7D63maKcv+2S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Enquiry 88210103.exe

Files

Enquiry 88210103.rar
.rar
Enquiry 88210103.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ilow.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 548KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ