Static task
static1
Behavioral task
behavioral1
Sample
FATURA HESABI.exe
Resource
win7-20220414-en
General
-
Target
FATURA HESABI.exe
-
Size
25KB
-
MD5
9c6e67ca7790e12c09fa65bacf8b0618
-
SHA1
9b7f0452d2e9e6632457724f106d0b84ae8a8070
-
SHA256
35256002ef756a42079880ccdec95862e80830e69ebc56225f2b2a34ec28f771
-
SHA512
5db4e8ac7ad1df7c7142ac37a4774045db7324e01368dd7d9465a03561a5f825afbcf0341651ff615a110881ebb6b8ddb010b2ee1240b6baec3661aa22fcfde4
-
SSDEEP
768:lqIUmNgbqPGeWxSHoCKbEMfnTbxB4hPM0:lqANgbkGeVorEMfnTbxB4hPM0
Malware Config
Signatures
Files
-
FATURA HESABI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ