General

  • Target

    11072024_1652_11072024_Fatura.rar

  • Size

    434KB

  • MD5

    7ac7c7311256fcadff9d5d577a1341cd

  • SHA1

    4023a172b0d4ee39eedd857f238967c3caa6dd65

  • SHA256

    6292fdf69844ed834e9f6ca211bdabde3b0ac0de7a11a9cca188ca3f99c313ef

  • SHA512

    2cdbece21bff99a6b50f2d6f6c3bf4bb57fd2f2fa4058ab6cf30079567435ea7bb9a97d40f731d80b3526e5afad1c7f01f9ad3f4cd98b7910ed12c60df8c025b

  • SSDEEP

    6144:tNEXGAIZ2+PZtk05/eM0kJkb1OroG8TcWf75pSolDPdNbN3eHIEkLTcWjt1m50/d:tNEXGRZ7I05/zvrtKpBNb4o7Njt1UHO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 11072024_1652_11072024_Fatura.rar
    .rar

    Password: infected

  • Fatura.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    f677acae05efabe7411a40902b2d88fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    595a3fd71239f605bb02d7a5e48fd4df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    0d6ae1f1ecbace583969d8eb8b21d1b8


    Headers

    Imports

    Exports

    Sections

  • Jammer.Opi
  • Politicking.Ine
  • computerspillets.txt
  • disusance.nar