Static task
static1
Behavioral task
behavioral1
Sample
Inquiry IP250009 AF2506595_pdf .scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Inquiry IP250009 AF2506595_pdf .scr
Resource
win10v2004-20250129-en
General
-
Target
02022025_1236_Inquiry IP250009 AF2506595_pdf .scr.iso
-
Size
90KB
-
MD5
0be00e4ad3ceaa683cf8ea3dfbbb9068
-
SHA1
da4fd004e85104086dc2a5a7c1f7313b79ee15b2
-
SHA256
30c4337662cb4e4f3a850b22075a4354642552c136839a2282139d3e20ad59bc
-
SHA512
4edda3df6d9a3caca10b3c9b9a70112d72b5de0a06d41124c8d7e2e5f3d9ee704665af134724469026a900dee51d17016db0a3314f054995ca894fb3b171aaec
-
SSDEEP
768:RFEtDBZdaNLXc0oZKNuPYlmwK3xKeL7BykIM:zEtDBZdqLcNgcYYTbBykr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Inquiry IP250009 AF2506595_pdf .scr
Files
-
02022025_1236_Inquiry IP250009 AF2506595_pdf .scr.iso.iso
Password: infected
-
out.iso.iso
Password: infected
-
Inquiry IP250009 AF2506595_pdf .scr.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ