f626445f388f589d38ef7d44e468932943147549b3a4e89b70d041add4317bc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f626445f388f589d38ef7d44e468932943147549b3a4e89b70d041add4317bc7
Size

2.4MB
MD5

11751f8d847764936b7bf014302da87f
SHA1

483d5bbfd9d740939bdab6a5c51fb5941cfe2b0c
SHA256

f626445f388f589d38ef7d44e468932943147549b3a4e89b70d041add4317bc7
SHA512

4c62d9b89f3e574614910e3ed23dbd90c68d2a379cf3ff7f9100b5412df25945b695c0d9c58f93e6e8fb4b5ee19f2d41b37ae43aa63022c4b407888075d0f4fe
SSDEEP

49152:XdNYoYW4IETrsgUvu9N8ivdKDhA+WsPP6QmUTftIsekqXfd+/9A2hXE0A:bYVrsk9N8ivyhAdsPSQxokqXf0FZh2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f626445f388f589d38ef7d44e468932943147549b3a4e89b70d041add4317bc7

Files

f626445f388f589d38ef7d44e468932943147549b3a4e89b70d041add4317bc7
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Desktop\Sams_V2_Src\amsiwala\amsiwala\obj\Debug\amsiwala.pdb

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ