Static task
static1
Behavioral task
behavioral1
Sample
AME Wizard Beta.exe
Resource
win10v2004-20230220-es
General
-
Target
AME Wizard Beta.zip
-
Size
28.4MB
-
MD5
d85059f62b09f123bec9b43c21053004
-
SHA1
f6109bb3a1e995235162eee81e73edc6bcd94323
-
SHA256
7019c4cd11789769b1e50eeb773913c0c907bce0e60339a15545ef752dc76964
-
SHA512
e48d18799c6125aea0f4651d62306dbddaab3dea1b4b993dc68a01bc1fe2edf6942e01ff33891e6b55426e755f2bb61447a3858e8f355f755f4c058767cb3aee
-
SSDEEP
786432:FrOpID+SwzDIabMfL29pWg9hGcXQMk/Q+Z+fSFCn2zgJVw8iYB:lS0fQMfYAghGiF3+IZw8iM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AME Wizard Beta.exe
Files
-
AME Wizard Beta.zip.zip
-
AME Wizard Beta.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 45.2MB - Virtual size: 45.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ