factura[.]uue | Triage

Sharing

Copy URL Twitter E-mail

General

Target

factura.uue
Size

631KB
MD5

2897393cd2869de31bd091636dd9c98f
SHA1

b871ee46780b57e2757c631354750acd111dbbb7
SHA256

37e8212679a5294cdb553acf9f21711d769b99418b76841f81787de7778b58bc
SHA512

e8e80c18ff216245d8712891868e8997d6f8da7b0cd055594ea669b0e4e29a4207ad9b5d19582c8bf0c4772d3a3065d138788037d6d584ea4d6eccd179c2b22a
SSDEEP

12288:ZvgsdZlOJu/9Cs38ql9Zx/wJj8qGYSFELJSnSYrg9v1GWH:ZosbB78ql9ZqJj8qG5nShMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/factura.exe

Files

factura.uue
.rar
factura.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ