Static task
static1
Behavioral task
behavioral1
Sample
Inquiry 241128.exe
Resource
win7-20240708-en
General
-
Target
29112024_1326_27112024_Inquiry 241128.Pdf.7z
-
Size
807KB
-
MD5
fc083cc8b2646ac0c0e3c7e65918c209
-
SHA1
813526b98808c0695af5ae4c5f0cac974959dd23
-
SHA256
a654c852e1dc441eb077e2b07815e5114d798c210b9025371d6a9b7fbfc1b7d8
-
SHA512
65112832fe5794f566e6803e506a4797aa0707d8c377e434f949d0ae68a601353cc6f95536fd116931f5babbf82214663208f7049c37c0bb54049688712a83fb
-
SSDEEP
24576:baRvvoPjLi2Yi8PtEnedpLLqk00rQgp3oGm/:+RvvTiJnMT00rZYF/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/Inquiry 241128.exe
Files
-
29112024_1326_27112024_Inquiry 241128.Pdf.7z.rar
Password: infected
-
Inquiry 241128.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 873KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ