Tfdq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FATURA 2024-001.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FATURA 2024-001.exe
Resource
win10v2004-20240226-en
General
-
Target
0426f6bb9f77598c8f3e0a2458201319.bin
-
Size
691KB
-
MD5
64ca57ee430954e0090fb152b7530b16
-
SHA1
b4cbb0206d7f721a38a2d6030a40228ba946f2f2
-
SHA256
d0d8be4fcb42f08ea292ecf65fac8012141157be811fb61627e96ea4b48b02db
-
SHA512
888a1aef225cf10129dd4f2aeace786f6994fade88741a36e0833651f31839e7dc97d36d0319dbe9fe1c7db572397d2037c06e2298d40712dde4b67b12d7a57e
-
SSDEEP
12288:0o+0AJnjwuG+wrg7IxAHBbpo+Oh7OLGgzw9Xxsclo1wmdErT4p+0Akhgr6SHoJ68:FAUTAhatOLGz9ifdVp+bagr6SH+XAqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/FATURA 2024-001.exe
Files
-
0426f6bb9f77598c8f3e0a2458201319.bin.zip
Password: infected
-
4f2c34f97b418adc9303fe4df5d305286415e6292477a93f3dd57b448603430b.r00.rar
Password: infected
-
FATURA 2024-001.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 699KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ