amounted[.]dat | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
amounted.dat
Size 279KB
Sample230614-pbmdkagg5z
SHA256 fd586ed89b79241966218b63a4dcef796811cc216947ba35f3ea1d8a238ce4eb
MD5 ed8f05e36358b304d60d28a8441306d9
SHA1 b2ca59023d54f6a248064ff36170eec3c1eb9bd6
SHA512 4feddeaea80eecb41f5787625ef9553bd67ce5ba38f5ff11330679d47085934dfc41bc53f4e904034e375271d23ead341771db1193a404d3ffff7b209699be78
SSDEEP 6144:+RibgWEZ5Txh9QQU7kVTAHluobjrkMk9P18/79O19VGy:+RSBEZ6k9PC/g1a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
amounted.dat

File Explorer

amounted.dat

.dll 279KB

amounted.dat

IMPHASH b82f222a9ed7cfb1419f0e64bdeaac8b
SHA256 fd586ed89b79241966218b63a4dcef796811cc216947ba35f3ea1d8a238ce4eb
MD5 ed8f05e36358b304d60d28a8441306d9
SHA1 b2ca59023d54f6a248064ff36170eec3c1eb9bd6
SHA512 4feddeaea80eecb41f5787625ef9553bd67ce5ba38f5ff11330679d47085934dfc41bc53f4e904034e375271d23ead341771db1193a404d3ffff7b209699be78
SSDEEP 6144:+RibgWEZ5Txh9QQU7kVTAHluobjrkMk9P18/79O19VGy:+RSBEZ6k9PC/g1a
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5120

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kkcs11h_addProvider kkcs11h_certificate_create kkcs11h_certificate_decrypt kkcs11h_certificate_decryptAny kkcs11h_certificate_deserializeCertificateId kkcs11h_certificate_duplicateCertificateId kkcs11h_certificate_ensureCertificateAccess kkcs11h_certificate_ensureKeyAccess kkcs11h_certificate_enumCertificateIds kkcs11h_certificate_enumTokenCertificateIds kkcs11h_certificate_freeCertificate kkcs11h_certificate_freeCertificateId kkcs11h_certificate_freeCertificateIdList kkcs11h_certificate_getCertificateBlob kkcs11h_certificate_getCertificateId kkcs11h_certificate_getPromptMask kkcs11h_certificate_getUserData kkcs11h_certificate_lockSession kkcs11h_certificate_releaseSession kkcs11h_certificate_serializeCertificateId kkcs11h_certificate_setCertificateIdCertificateBlob kkcs11h_certificate_setPromptMask kkcs11h_certificate_setUserData kkcs11h_certificate_sign kkcs11h_certificate_signAny kkcs11h_certificate_signRecover kkcs11h_certificate_unwrap kkcs11h_data_del kkcs11h_data_enumDataObjects kkcs11h_data_freeDataIdList kkcs11h_data_get kkcs11h_data_put kkcs11h_engine_setCrypto kkcs11h_engine_setSystem kkcs11h_forkFixup kkcs11h_getFeatures kkcs11h_getLogLevel kkcs11h_getMessage kkcs11h_getVersion kkcs11h_initialize kkcs11h_logout kkcs11h_openssl_createSession kkcs11h_openssl_freeSession kkcs11h_openssl_getCleanupHook kkcs11h_openssl_getX509 kkcs11h_openssl_session_getEVP kkcs11h_openssl_session_getRSA kkcs11h_openssl_session_getX509 kkcs11h_openssl_setCleanupHook kkcs11h_plugAndPlay kkcs11h_removeProvider kkcs11h_setForkMode kkcs11h_setLogHook kkcs11h_setLogLevel kkcs11h_setMaxLoginRetries kkcs11h_setPINCachePeriod kkcs11h_setPINPromptHook kkcs11h_setProtectedAuthentication kkcs11h_setSlotEventHook kkcs11h_setTokenPromptHook kkcs11h_terminate kkcs11h_token_deserializeTokenId kkcs11h_token_duplicateTokenId kkcs11h_token_ensureAccess kkcs11h_token_enumTokenIds kkcs11h_token_freeTokenId kkcs11h_token_freeTokenIdList kkcs11h_token_login kkcs11h_token_logout kkcs11h_token_sameTokenId must

Name

.text

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

amounted.dat

kernel32

user32