fatura[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fatura.exe
Size

1007KB
MD5

a12bf6c33f32a71e8eb03f64d4e53f4d
SHA1

50a3df4d5a5eeff483ea8939758f0eee531b5d4c
SHA256

fc67f9c9b081110ba642d574468cb8fb516881faeaa100a88f1071f9386a4635
SHA512

c62f7c96b9119b1c14002bcfee030363a612fe824eb2b37efbcdc082d5efbba5c055390fe94e4ff33b34cd9b0ca3b66c698472829500e7e86cc7710e13ba5a4d
SSDEEP

12288:0JOF77kKT1ip69nQAvmFRdo65CH3TATNmgTzw4KeAP+8zADtiCFXTY8y9vWQmbC5:0JQNTLQAOFROSCXjGsMAPytitL9vmT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fatura.exe

Files

fatura.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 826KB - Virtual size: 825KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ