Enquiry 1525[.]zip

General

Target
Enquiry 1525.zip
Size 673KB
Sample250718-lp49raywas
SHA256 f8638f083c98bd295705f0e563077726a72ef319635d4211e84df369cec98230
MD5 0ae44f7e128f8f719d79a5404e84d7b3
SHA1 6b90db70c4e91cd6ea2597718d7375521a80b555
SHA512 44d7434cc2e2fc0d04f05b2219aa390fa0b825b5d02133a5ff6b1d55fbf14241e625517bf2c28094c2096d6c81f2727c200db35bec8af35c921455c87bbaeb6c
SSDEEP 12288:BCDI3S1r09Ob0iy+c7NArPhP1vYdHerYDwNu5YIDVUGn5TxzKUFJyX:YrrYX2PLAd+rYkdWJ5ThdFJA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Enquiry 1525.exe

File Explorer

Enquiry 1525.zip

.zip 673KB
Enquiry 1525.exe

.exe 749KB

Enquiry 1525.zip

SHA256 f8638f083c98bd295705f0e563077726a72ef319635d4211e84df369cec98230
MD5 0ae44f7e128f8f719d79a5404e84d7b3
SHA1 6b90db70c4e91cd6ea2597718d7375521a80b555
SHA512 44d7434cc2e2fc0d04f05b2219aa390fa0b825b5d02133a5ff6b1d55fbf14241e625517bf2c28094c2096d6c81f2727c200db35bec8af35c921455c87bbaeb6c
SSDEEP 12288:BCDI3S1r09Ob0iy+c7NArPhP1vYdHerYDwNu5YIDVUGn5TxzKUFJyX:YrrYX2PLAd+rYkdWJ5ThdFJA
MD5 SHA1 SHA512 SSDEEP

Enquiry 1525.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 50bee81de3e9e73ef381e154620e5e81a3e8aa2d62ae88efca8e56d27feaf1a0
MD5 d3d40a99751c1f6b3c90efb533adf324
SHA1 11d2bc3713ed2c7f758f652f8dfbf3faaf7b21f5
SHA512 e28c40caaee931f668b5a17f7835c89b665fed671bb6c57f2dff41970215948e33526e9bfd88a8af0b7e30ee3d5cafe597082ed46d6ee80993dd753b29d2fd5f
SSDEEP 12288:VSHfLPHe/8XuRHfZbHb+cRKBjrjX1PYdwNhUy9ScuV3HBTk1/vMlb+:VwfjHe/hHfNHbkVrRgdwNhF9Sc4xY1Uy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

756934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DcGe.pdb

Enquiry 1525.zip

Enquiry 1525.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Enquiry 1525.zip

Enquiry 1525.exe

mscoree

dotnet