ama[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ama.exe
Size

4.5MB
MD5

a247ede4466a194f7eeab1d5aed3438e
SHA1

ae2f9a8811113f869a298fbcecca5ddc37665987
SHA256

08a8cd97a183ea78cf5510a42d2a63435c1b1f23737c1ccb40bc0fc2010dc572
SHA512

8c33eddaaf8804379e863e8a18413785e4ae232fc2b57f319dfe2d34a8648ea8e3a3dea06b31bcb0839cee5be2cca32d215ae6a3885b5a60c57880acae5c813d
SSDEEP

49152:N2YeC8ce0enzbAwqxwk3EhoR3/6tLw6EggLagKuTRE8/rMVo6wRtCBHyzLY8ctzE:l8cXlC992EHERItKtWYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ama.exe

Files

ama.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ