amadey | 2028-76-0x0000000000400000-0x000000000043D000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2028-76-0x0000000000400000-0x000000000043D000-memory.dmp
Size

244KB
MD5

744b5b468f874781ff42622b343ef9de
SHA1

5881a126ea24a59a95e91077bfbf4668bb1bc749
SHA256

615d130cbf6d7620aa010575ba4b81f2487cbe39f779c82bf057d6cf174782be
SHA512

cecfa8878970d4db92626cbec3a72811fd325405b3e04c89cf3e5be99c7bb5e50d1a3e2b7a70e486e8ebfaac0170c4e2d82a08b203a3ee1be42de73a9b267630
SSDEEP

3072:1Vb9ClXFaXJSwvUVlkiDnbJQrs2xzOycXJMKKpj9u1C/ge:olXWJSwvuvJQrB5OhHKHu1C/

Score

10^/10

amadey

Malware Config

Signatures

Amadey family
amadey

Files

2028-76-0x0000000000400000-0x000000000043D000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ