Static task
static1
Behavioral task
behavioral1
Sample
Inquiry.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_86a3d79159668222e08f1b8fcb16b9994188077405d78453744f59bb314fc63d
-
Size
507KB
-
MD5
22672a61bbd5d814d1bc6d1b4c941bab
-
SHA1
c7fe7276ae2a3e5d0ac9144cdc9b6cc17c03ac4b
-
SHA256
86a3d79159668222e08f1b8fcb16b9994188077405d78453744f59bb314fc63d
-
SHA512
afce9afde843dc6f532a0c8b903ebd6915bcf329b16aaca4dc4edfc742b6b6d9c5f377ca2ed3719cab2b523183a50edab94f97e13227bd0f6b88452a5bbaee18
-
SSDEEP
12288:qfWW9JAvXiEG4RzKp1FutCNcvZlp3G+BVeaKdKPmmTn5ihpFgLHg:qf/uGgzKp1FuTv7pzfNjTn6FiHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Inquiry.exe
Files
-
JaffaCakes118_86a3d79159668222e08f1b8fcb16b9994188077405d78453744f59bb314fc63d.rar
-
Inquiry.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 701KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ