Static task
static1
Behavioral task
behavioral1
Sample
factura.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
factura.exe
Resource
win10v2004-20230220-en
General
-
Target
6E2B20FC3E8EAEC739FC8B093E80BADA4777E9812798A5F75AC2164DE816AAD1
-
Size
762KB
-
MD5
401be587f9ef98f7e5a3d67a7cd0ccf3
-
SHA1
abfd9fa0ce563c3c009474292185acd5afe401e6
-
SHA256
6e2b20fc3e8eaec739fc8b093e80bada4777e9812798a5f75ac2164de816aad1
-
SHA512
967d0fa452906184849b7aa9240f2b164c85f03496f011722bdf83a0db7ba4a3ffb874c99586f02f398f4d4b502a195567a6dc3d0694ee307815b1fae11b83b5
-
SSDEEP
12288:sisfJQgoXxwPqYi3L5L/LolVcHzgIgIZl8YuEnKwCk0qjHw3Xdr6bFFXJ9Bbin:38y6w3Lxbjr8YuEnKV+U3Xdr6/X3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/factura.exe
Files
-
6E2B20FC3E8EAEC739FC8B093E80BADA4777E9812798A5F75AC2164DE816AAD1.rar
-
factura.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ