Static task
static1
Behavioral task
behavioral1
Sample
AME Wizard Beta.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
AME Wizard Beta.exe
Resource
win10v2004-20231025-en
General
-
Target
AME Wizard Beta.exe
-
Size
14.2MB
-
MD5
67216b3e59602fda3b37dbb6d971bf06
-
SHA1
6c341090de0beacde9df51c6f4788714f1ef2589
-
SHA256
1eedf7c46711c309c1ff54a43a68ce254337705994fe26ca8c8578b1a6cc8dcb
-
SHA512
6aa5c29ddc89269db9b26be0741807e2a9d2412ddb8f4c84a4fb357e0735981a12b5e9c76703be30d793f5fb34db574ed7c605b3ca28a3514d37a627be5aadb0
-
SSDEEP
196608:5mmH3sA6CuVMNF1mziD7S6ZY7EY3yrF23jlWUwQu:5gAnuYGWY4Y3yrc3j0jQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AME Wizard Beta.exe
Files
-
AME Wizard Beta.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14.0MB - Virtual size: 14.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ