Behavioral task
behavioral1
Sample
fdd4e4494491fc2c5ca85a6896123994.exe
Resource
win7-20231215-en
General
-
Target
fdd4e4494491fc2c5ca85a6896123994.bin
-
Size
4.0MB
-
MD5
fdd4e4494491fc2c5ca85a6896123994
-
SHA1
af2c8d5be92945de1e86c6fac841f3ff528de8ef
-
SHA256
45e14955c3b6343b5bb0e0f55bc7473ae4b739735559566e4b765133414d10c2
-
SHA512
fb8c32731c740cefb19e0674f0fe26c5c1563ab47d389994f171b98fd74c8ae5824501c17a72392fc0282fef5e007651c0c9b5f57c0abc75711e11fcbac34905
-
SSDEEP
98304:WXdhurJa5b/dIfKw9G60her1VsrNoRoit:WRIyw9G60hUVsko
Malware Config
Signatures
-
Amadey family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdd4e4494491fc2c5ca85a6896123994.bin
Files
-
fdd4e4494491fc2c5ca85a6896123994.bin.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 975KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE