nFATURA 2024-001[.]r00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nFATURA 2024-001.r00
Size

691KB
MD5

0426f6bb9f77598c8f3e0a2458201319
SHA1

d97837ede0b891caadd81aa310b8959aa6d6f352
SHA256

4f2c34f97b418adc9303fe4df5d305286415e6292477a93f3dd57b448603430b
SHA512

8398b75685153eb9c9a499207a67d358d0936c6e5f03fefe9b3bd29462b924973411299a3b330c25c4aa699675aab7f0e50a4ea1d92d5bf3974beee5f993d806
SSDEEP

12288:eHGa8AxK42559LaOVuXeowWTlB4x6COzw7a9+XJGGLIjQRqHHo84C:28Eu9LaOVieowWTsTJ2980dkqo84C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FATURA 2024-001.exe

Files

nFATURA 2024-001.r00
.rar
FATURA 2024-001.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Tfdq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ