fatura_25148[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fatura_25148.exe
Size

558KB
MD5

0c6c529ac402229837a07c0d09d4b841
SHA1

79e24c6f76464478bd88c45b0d0dd50296d5fd07
SHA256

61242d372c2335940696dbf6d7ea85fbd95bd192d40a2e347faf43d9cbd04c82
SHA512

2e34857f9c8826a97c1ccf444ff18f4952847201e1bda66b323c610abe359e1e4fb0eb90e8a1488459f7dc6186baef1b6f772ff5ebb9eea06b2cb4b8a165de50
SSDEEP

6144:PYMbsEvycCJULPWzt7dfzWrrl1K7GPy9hXwCI8rpYeCBfPc7e51SLK1kF0mpk3A:PYov5+UzAWrrl1fyrXwb8QQe1kF0Ik3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fatura_25148.exe

Files

fatura_25148.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ