FACTURA-09876RT567800[.]exe | Triage

Sharing

General

Target

FACTURA-09876RT567800.exe
Size

670KB
MD5

ac94c3ea86ecdd087b575bd5ec5ead4c
SHA1

d14b851f26f33a5a4020aaeb3397f75b020a4346
SHA256

d9b66f2580bd43a5b03487e161d925c63b3d485d22d71607060eb07e453c03d7
SHA512

d827f19987f3017e89266abbbe2dfbb3ff25aceb0b607bd829c0a2e6cd0e2eba82557d375d4908b69ba85f34c4304354b330f27c17cdf431ac97f843d0be1143
SSDEEP

12288:F2+D4/TzbXdP+eCSmndoo45i9lNg/dKRLvyiZhvoIbN4B3yfh:F25TzbHCPEdKtZhvpWdyfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FACTURA-09876RT567800.exe

Files

FACTURA-09876RT567800.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ