FacturaMxico-638300[.]exe | Triage

Sharing

General

Target

FacturaMxico-638300.exe
Size

137KB
MD5

fc2d0d18e45e0ca745ed1957c1b79d9f
SHA1

8361caecad41277a56d65bd0db2c13ba82c2d927
SHA256

b24049d8feb9439b8946b6e1313a16dedfe9f479bf3e9fa9966952d0dbacbbdb
SHA512

2e9e4c46b32f739ca247af485f48ec61ce54cfcd28111093838a0aa512d8eedb7c410ea7801793d0ac6422511030c59363c8803ccb287541b9d97aeed157c11f
SSDEEP

3072:DoSJ/dMd0ku5SnUVCuGmejfBuddKTmDD911xlfrsZGvShTJDTk/:D7dMd0kubVCuGmejUqmN11UGvShT5k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FacturaMxico-638300.exe

Files

FacturaMxico-638300.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ