02082024_0159_31072024_Factura_FFP-2024-0607[.]zip | Triage

Sharing

General

Target

02082024_0159_31072024_Factura_FFP-2024-0607.zip
Size

676KB
MD5

24b0a6de0a5ef5176ba51cc8d6650f8a
SHA1

7143591f337df2447daa317c7514237461f22a90
SHA256

f835b11aba1d3384ba9f66ffa88fadab60be3d9bf988c638406cf5678099aca4
SHA512

3baa4517e765c29d7e8ed98b8ba7a13a4662a3b561b2ddedc09a062df9b98e24ddc12b809e32aeb6fc6bff22018bff6768f528be7e808c3b2b4e8d1851a5f2b6
SSDEEP

12288:hDGCWfJXNg5rKPDKXqIzLFaO3tscIti8r/h2BZhrvu/08HCRTchll0lmZEtgmpdo:h6DDg5rKbIqQhtscp8FAK08iRTAXELt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Factura_FFP-2024-0607.exe

Files

02082024_0159_31072024_Factura_FFP-2024-0607.zip
.zip

Password: infected
Factura_FFP-2024-0607.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ