Behavioral task
behavioral1
Sample
8d1298f088b86a4ee6869ca973017fec.exe
Resource
win7-20231215-en
General
-
Target
8d1298f088b86a4ee6869ca973017fec.bin
-
Size
4.0MB
-
MD5
8d1298f088b86a4ee6869ca973017fec
-
SHA1
590c962eef08a63b5ef7199c5d56c9e1c02c48de
-
SHA256
6ead66bc1da1c72c2e38839e9b656e10d789b749ac972f7d176908df1acb7a36
-
SHA512
746f012b976566b6a9de65a34a25c1e4e030a29ab03500f3e7e74d1528ae5d46e36abc0d35ee08e89ec327bcbd60f3a2cfa46c17da96da5accf7a81e2b207038
-
SSDEEP
24576:CVww7OwL0gawqQSVW/AcY8m6KdJiQFqKyvljz:CewqLgarz1E
Malware Config
Signatures
-
Amadey family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1298f088b86a4ee6869ca973017fec.bin
Files
-
8d1298f088b86a4ee6869ca973017fec.bin.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 975KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE