c601b7278ae5a7b4f09e71209054c91aa77e5b11484f970fe5227715463df152 | Triage

Sharing

General

Target

c601b7278ae5a7b4f09e71209054c91aa77e5b11484f970fe5227715463df152
Size

721KB
MD5

bec851de65c0c36b96841f5ed3363536
SHA1

e00dd64ec4c1810396303e8288240f1e7fa6d7a0
SHA256

c601b7278ae5a7b4f09e71209054c91aa77e5b11484f970fe5227715463df152
SHA512

7fecb816ea7df1ffa14452835c1c890c2715f42504a85d172250a328470fe534a9a57c32cec9c1bf025b9c4e8dd2893f675fd02dc1ea9a31f3a6055296f82599
SSDEEP

12288:oWfpQ7suwPO/AxRJ4dFkc+KnhnweBEyX/cde6gHhAnbRKQ3XHvK:/Q7suwWIJ8rhnwwd/cde6gikQXPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/INQUIRY_pdf.exe

Files

c601b7278ae5a7b4f09e71209054c91aa77e5b11484f970fe5227715463df152
.zip
INQUIRY_pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ