General

  • Target
    FACTURA_Nº_2250826.exe
  • Size 382KB
  • Sample260520-vn28faew8r
  • SHA256 cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • FACTURA_Nº_2250826.exe
    .exe 382KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • Btrrbel/Weaponshowing/Antiliberalist.Per
    40KB
  • Btrrbel/Weaponshowing/Sardinien.she
    38KB
  • Btrrbel/Weaponshowing/behandlere.svv
    52KB
  • Btrrbel/Weaponshowing/botein.fyr
    43KB
  • Btrrbel/Weaponshowing/danicas.for
    65KB
  • Btrrbel/Weaponshowing/dearsenicize.bor
    80KB
  • Btrrbel/Weaponshowing/decollations.jil
    86KB
  • Btrrbel/Weaponshowing/interxylary.air
    55KB
  • Btrrbel/Weaponshowing/miljadministrativ.kal
    54KB
  • Btrrbel/Weaponshowing/ministrene.sku
    89KB
  • Btrrbel/Weaponshowing/morass.bis
    51KB
  • Btrrbel/Weaponshowing/renathe.boj
    61KB
  • Btrrbel/Weaponshowing/sknsangens.sli
    64KB
  • Btrrbel/Weaponshowing/suboxidation.ebr
    43KB
  • Btrrbel/Weaponshowing/tequistlateca.fem
    17KB
  • Btrrbel/Weaponshowing/udsgte.emb
    12KB
  • Btrrbel/Weaponshowing/wellnesses.par
    70KB
  • Btrrbel/syvogtyvendedelenes.Wan
    168KB

FACTURA_Nº_2250826.exe

  • IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
  • SHA256 cd9b8405e09bed643ec9f4310de2d377b0d686da1dda72bfb7953cda26024868
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
cc:10:e9:75:aa:84:8f:c7:06:38:58:10:12:c8:de:8e:01:85:97:70:a8:cc:c5:f7:8c:4e:a1:51:a0:9f:4e:d0:90:dd:ec:95:3b:73:5c:31:e4:09:9e:17:a0:c4:d7:52
Digest Algorithm
sha384
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Konsignerede,OU=Rentesatserne Tankeeksperiment Treadle\ ,O=Konsignerede,C=FR
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths