amadey | 0x000900000002323d-269[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0x000900000002323d-269.dat
Size

150KB
MD5

52d87a9e12a378ab6a55331f68612495
SHA1

1420288af8fab6d8f4995d40624be2fbbc47a0ed
SHA256

ca5adb9eba7596a4fd29065f33a52b9bae6279e657f1a07244b23919d9062a41
SHA512

b10f81fc5ce25966aafadb38cb9cfddf39ca6cba26a319e2381417e3a2981142d3a94387491f6eda65729dd0bb6234ec6c0fd5219185191697198002a00f7e27
SSDEEP

3072:r16kLygoKCcjSdpohPsyTeMVx/hXv3Z/P3+930I7m5U0HaixFdMZ:ZoKCcjSrSPsMJPZ/P3+9303XHE

Score

10^/10

amadey

Malware Config

Signatures

Amadey family
amadey

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x000900000002323d-269.dat

Files

0x000900000002323d-269.dat
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ