General

  • Target
    rFactura-11-03-25-00000118.exe
  • Size 647KB
  • Sample251203-cfajcatlcj
  • SHA256 f58c14370ca887ef557112732534fa842b8e443719285a962f1a4d66400a7123
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned binary was signed by an untrusted entity.

  • NSIS installer 2 IoCs

File Explorer

  • rFactura-11-03-25-00000118.exe
    .exe 647KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • Sixteenthly/Finanspolitikkerne167/Astdzrix248.reg
    440KB
  • Sixteenthly/Finanspolitikkerne167/Hypersubtlety137.txt
    383B
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/Spejlvende.kor
    561KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/Thanatomantic.sco
    732KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/Vinifera.sve
    622KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/hovedteksten.hae
    509KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/huissier.ide
    147KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/interieur.dra
    368KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/mavelande.sim
    286KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/signalisation.raf
    194KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/sofastykkerne.ove
    23KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/stormskadeerstatningerne.kod
    306KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/suprasensuous.klu
    34KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/trvarernes.sad
    618KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/turbokompressorers.zel
    220KB
  • Sixteenthly/Finanspolitikkerne167/Ophioid34/witbooi.jpg
    .jpg 74KB
  • Sixteenthly/Finanspolitikkerne167/Proctectasia134.jpg
    .jpg 30KB
  • Sixteenthly/Outbribed.Cun42
    261KB

rFactura-11-03-25-00000118.exe

  • IMPHASH b78ecf47c0a3e24a6f4af114e2d1f5de
  • SHA256 f58c14370ca887ef557112732534fa842b8e443719285a962f1a4d66400a7123
  • MD5 SHA1 SHA512 SSDEEP
  • Untrusted Codesign Signers

    Codesigned binary was signed by an untrusted entity.

  • NSIS installer

PE Signature issue

Digest
fd:0c:31:85:e0:e4:9b:40:d9:2e:0b:14:61:40:1f:d5:57:70:3e:96:d4:a5:36:bf:01:e5:98:53:aa:c1:68:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Glycerinating,OU=Ideassociationer Helligtrekongersdag\ ,O=Glycerinating,C=FR
Chains

Nov 28, 2025

Minor OS version
0
Major OS version
4
Entry point
12559
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths