Static task
static1
Behavioral task
behavioral1
Sample
Factura 09906899809.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Factura 09906899809.exe
Resource
win10v2004-20231127-en
General
-
Target
Factura 09906899809.exe
-
Size
636KB
-
MD5
648d24805b6396c7829ed03801c3afcd
-
SHA1
3124010bdb515f06aba5de75331e2681e9941f83
-
SHA256
20227c6e65e5acfb344a1a022cffb491f753a7194c1f9e639c2c6f33658abfb4
-
SHA512
be6b834d1b2fc2292a5b119fbbad517b244a651e088ebdf475ebdec76b9646dbf62ea0f0a448906908f779128bbc004e9430287ce6f1d72ae7b5d5f2db45819c
-
SSDEEP
12288:4Ppjzd7BR6wT/wZ/H/0jkD1KNTb6Ff0pjlfYeFMpukznHGtuWSX0:4PpjzpBcZ/H8jxNTGlkjlf9FMxHWSE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Factura 09906899809.exe
Files
-
Factura 09906899809.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 633KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ