Static task
static1
Behavioral task
behavioral1
Sample
FAKTURA 4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FAKTURA 4.exe
Resource
win10v2004-20230220-en
General
-
Target
FAKTURA-4.tar.lz
-
Size
939KB
-
MD5
a9fb9619c7a2d7b2fbd31adc56986ebe
-
SHA1
2e90d6b98b4002ddd096bc1245c060164c170dab
-
SHA256
d3acb0ae73ba916781dd519b9161f46f4b4ae6db7bfa898776949c3bc4685d00
-
SHA512
124fceab1d244928d74799e5853209a740f58031019079ee0642894644cab31dd93886322130b48a88a35d750aea774ba148da0d220f15e350b65a65a84e5d4a
-
SSDEEP
24576:OcN+MVSi4ZgL3y0AszUw+U2Z6Are5SZFJjo:OdKT3F5zEUd5SFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/FAKTURA 4.exe
Files
-
FAKTURA-4.tar.lz.lz
-
sample.out.tar
-
FAKTURA 4.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 838KB - Virtual size: 838KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ