Static task
static1
Behavioral task
behavioral1
Sample
Amethyst-Installer.exe
Resource
win10v2004-20230220-en
General
-
Target
Amethyst-Installer.exe
-
Size
8.2MB
-
MD5
c7e27c9189a1d55ecac5a57cc2e9f9ae
-
SHA1
82cf846587bf87f353a77310e0d111303f43fe77
-
SHA256
9dea8ba17aa1a05d79dd77cce3908e4b4d3c1e04c35188ee86449f903038dfe6
-
SHA512
fafd8e3c6606bad1541682c8c45145a9b487c0ed5d668dd0088eb6279728f82c2d92fd6b84eef27b702708d3299c613cf74fd5d6e810d7a8b938444a263038ad
-
SSDEEP
98304:PntSnAgF6dmgfv9Ks1F0rIVt5Rwx0BBpRwMBxJOP1d1NfR8tm5:PCAW6gHcpRhBp1BxJy7R8Q5
Malware Config
Signatures
Files
-
Amethyst-Installer.exe.exe windows x64
Code Sign
5f:34:67:7c:84:61:15:bd:4f:bd:6d:10:45:f1:91:78Certificate
IssuerCN={2494FC21-F370-4CAC-8607-ECDD7BA5EAF0}Not Before06-04-2023 23:33Not After06-04-2024 05:33SubjectCN={2494FC21-F370-4CAC-8607-ECDD7BA5EAF0}7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate
IssuerCN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before12-01-2016 00:00Not After11-01-2031 23:59SubjectCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate
IssuerCN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=USNot Before23-12-2017 00:00Not After22-03-2029 23:59SubjectCN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
7e:96:eb:76:d0:d9:4a:5d:0d:f1:e3:76:80:a9:fb:ea:48:dd:86:a7:db:ce:4f:8f:f4:91:10:1a:e7:c2:95:38Signer
Actual PE Digest7e:96:eb:76:d0:d9:4a:5d:0d:f1:e3:76:80:a9:fb:ea:48:dd:86:a7:db:ce:4f:8f:f4:91:10:1a:e7:c2:95:38Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ