Static task
static1
Behavioral task
behavioral1
Sample
Fatura20230425pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Fatura20230425pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Fatura20230425pdf.exe
-
Size
696KB
-
MD5
78ff188393e68ed6911e4df88a8d3822
-
SHA1
84fea5a9ca308155411fd996f119290ff7bac56b
-
SHA256
06ff6406d8466d250b94b2954469fc140cfdd746e05f4fc3320791900efeff27
-
SHA512
418dea4af025041425fc8181861cfe36bafca26bc61e08c91a847e4e7ea84a803a03ec93d4d09c5917ef9115b35cbfb00c9fd0613c834abd11431dbf8d481252
-
SSDEEP
12288:SbSJgvmsoik/ljp3Xn4Oz0jyZg190L1aFccz9eaJV5vkFYQTLR4:SbSJgvmsoiklpHnXfZg28p5MFYS14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Fatura20230425pdf.exe
Files
-
Fatura20230425pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ