amadey | c745256463f6d137ee095d0f2b6c48c6[.]bin | Triage

Sharing

General

Target

c745256463f6d137ee095d0f2b6c48c6.bin
Size

672KB
MD5

c745256463f6d137ee095d0f2b6c48c6
SHA1

9d3042a422e6425c2e52d85c614173550d9a6c4d
SHA256

0e5064dba3d6901ec2215159c03e73b3645b8b4735c02d9444bbf9db246a63bf
SHA512

93bc14ade147aa0424233cdcef166a26ed930e21a0f6aade7c5ef5e429b6e462d177010e4c36e7b1a640cb91fb91bf5fd98811d145ed96c5de07e6094d318bb7
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFSh1Jm2i1SO:rBKE6LguFSvJQ

Score

10^/10

amadey

Malware Config

Signatures

Amadey family
amadey

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c745256463f6d137ee095d0f2b6c48c6.bin

Files

c745256463f6d137ee095d0f2b6c48c6.bin
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ