Static task
static1
Behavioral task
behavioral1
Sample
rFACTURA16052023.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rFACTURA16052023.exe
Resource
win10v2004-20230220-en
General
-
Target
rFACTURA16052023.exe
-
Size
380KB
-
MD5
4f9f976cb93120596290f41f09b0debc
-
SHA1
f8336b4dfae22544477ae757303cc1f421524ded
-
SHA256
98d4579302521ac69e074cf22765754b838039a11366e4b049c1beb4e363beae
-
SHA512
d706a63b68aa29c0b5dd7216a040ef1238d94a970e3dd0a18b9c9f27e6ab53e64909277b0f577d5cec723e6c122e005f29657cbe7a3d5878f4f70f359556507d
-
SSDEEP
6144:3968mEivCxlr4dYFe66PjAApqWBfkfUWimNa+:U8mEigl8We66rAARBfkfUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rFACTURA16052023.exe
Files
-
rFACTURA16052023.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ