Fatura[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fatura.exe
Size

604KB
MD5

7bd655ad3d02f7e03a8cd4fdd30794e0
SHA1

ed686798d227845388dae9d62fad9d911dcca2e4
SHA256

4ad51ee71da26867904c568a85bd257a3ebe2afdb5d1a4b6c7746c19b1743173
SHA512

b4c013a0cfaf4b0e8db790f19e69f792533b89bddda0d060458397f7894f258f517a339472aee573de66ccbb737e3762a0e834137dfd25918e639b79019801ae
SSDEEP

12288:HX2iN8JJwReLOKYbyhjwLl9R4+1T9RKtpOmkMNA1IoyN9UVK8:HX1uJMeLhhmlg+bMtAmkTJybWK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fatura.exe

Files

Fatura.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 581KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ