nfactura 099800[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nfactura 099800.iso
Size

942KB
MD5

b3cb5f4c8451df035f5aeb925f07aae6
SHA1

d072fe3009fb8ef90a5938ff2e1d88154afbd2ab
SHA256

2542e321c7f17aeb4ed690b93d6b8e3d63e0057058fc826697700d557901493e
SHA512

1cac697baceb00b6905a0b0c043377f92d1cc7de7ba712bb34c116fd736f86cfbdc05fece29710c67686b12ca26d08d9f8b80dcd57ab6ca4fc9e091859f96b8d
SSDEEP

12288:GikVfqwi/iWsjdz9NrnrLJ6Y+I1OIQgzz6x6r7hx9aU+FYeAI4nqItyTKiB7:/qqwiiWenrEG5QwzGCf9+x4/tyt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/factura 099800.exe

Files

nfactura 099800.iso
.iso
factura 099800.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 871KB - Virtual size: 871KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ