AMOGUSVIRUS.zip
- SHA256 aff8ec65ee0bf0ffbd62761464ce7dbf1ca5e1496656cdf8162f9d0e5111e19a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AMOGUSVIRUS/AMOGUSVIRUS.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AMOGUSVIRUS/AMOGUSVIRUS.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
AMOGUSVIRUS/dup.py
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
AMOGUSVIRUS/dup.py
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target AMOGUSVIRUS.zip
- Size 245KB
- Sample240612-sr14fazdld
- SHA256 aff8ec65ee0bf0ffbd62761464ce7dbf1ca5e1496656cdf8162f9d0e5111e19a
- MD5 00ac750f5e9753b54e2af98c53c8b8cf
- SHA1 9d4c11fa627ecb6e8a114f66e45e553ee6ec7143
- SHA512 098442847aadbbe7438e84f6d5742b9537fe79d91aac01680fac2a9fd90aa0369d0a2aaeb045a5a322e92399e213f7db3b1d9e42fdc38b9da673ed6301af825c
- SSDEEP 6144:NJLkGlhxS7sJJ644nvTQ7Zv9ktdgBCSZWrjRK9g2B:zDKsJJ9SQ1VcdgNZWrjkB
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AMOGUSVIRUS/AMOGUSVIRUS.exe
File Explorer
-
AMOGUSVIRUS.zip.zip 245KB
-
AMOGUSVIRUS/AMOGUSVIRUS.exe.exe 17KB
-
AMOGUSVIRUS/amogus.png.png 63KB
-
AMOGUSVIRUS/amogus.wav571KB
-
AMOGUSVIRUS/dup.py109B
AMOGUSVIRUS/AMOGUSVIRUS.exe
- IMPHASH 139476721636f98c4d83a419d0fad918
- SHA256 0cca17293bd1bdc8eae8d476df358e8cc4e4a71cb57f4f63624a6007dca0b2c3
- MD5 65bdd0710459aa1116cee1d11d7e02d0
- SHA1 0ee56ce0b085e9bdb2cf310eba9bec18ad5b5962
- SHA512 050e2642c79dd5dacc00922f031d96adcc488d00a4956038af4ef5719db8d2469e4bea99928d325e537af9a98c5d3b95b7ecff4000295f26bb0370ca67d035b5
- SSDEEP 192:2+hVsx73KNKTdvJs6mXai5e3gUhY4H3pcsFVMqkHlBO5tf/rChT:2yVsZ3KkT1Js6mXXPUksrMlBpT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\VCProjects\AMOGUSVIRUS\x64\Release\AMOGUSVIRUS.pdb
kernel32
Sleep
CreateThread
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlCaptureContext
InitializeSListHead
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
user32
SetWindowPos
MessageBoxW
GetDpiForWindow
DefWindowProcW
GetSystemMetrics
RegisterClassExW
ShowWindow
SetWindowLongW
PostQuitMessage
CreateWindowExW
UpdateWindow
ole32
CoUninitialize
CoInitialize
CoCreateInstance
msvcp140
?_Random_device@std@@YAIXZ
d3d11
D3D11CreateDevice
d2d1
ord1
dcomp
DCompositionCreateDevice
winmm
PlaySoundW
vcruntime140
__current_exception_context
memset
__C_specific_handler
__current_exception
memcpy
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_cexit
_exit
exit
_initterm_e
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_initterm
_c_exit
_set_app_type
_initialize_wide_environment
_configure_wide_argv
_seh_filter_exe
_get_wide_winmain_command_line
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=261, version=33218,
count=10, id=260, version=33218,
count=4, id=259, version=33218,
count=6, id=257, version=33218,
count=1, id=260, version=29395,
count=15, id=257, version=29395,
count=71, id=1, productName=Unmarked objects,
count=1, id=265, version=33519,
count=1, id=255, version=33519,
count=1, id=258, version=33519,
AMOGUSVIRUS/amogus.png
- SHA256 52c2477bdb413d8e6c662b99c1d25279fef0069cafef18db4d038c286f168f4c
- MD5 6ee3704897cf6ab8178334f2e4a962b7
- SHA1 04badd41423da407a94729487db73505ae1f93eb
- SHA512 6ed7c75aaf2354edcc0f43b6d0e5d00bab98ba15f7bb0963520a067ebb1a77406be762f028eb3d2341ca32b5acf8597eee2ccac0e9ebbe30b0e503efd0a684f5
- SSDEEP 1536:9Fym4gegQ3XyxtoDIRRPZbouWnibJ+ejCwofuU8CQY6OQGav+Q:6TgegmfIgu3+pBgQ6OQGavj
- MD5 SHA1 SHA512 SSDEEP
AMOGUSVIRUS/amogus.wav
- SHA256 25ae908a95e8e8c7900dc22f3da91a4a533010a0042bf0ef92c2d166c062fa5b
- MD5 c3ee0666010022651e90f9c8e3c2b563
- SHA1 41b34ddff478bacb4f0e3383346d253fe6565133
- SHA512 c1a0c56843101e311cbfb89adf684a7b6dd534f6af250e759b2a4ea8e740fd374f6e56ce0a75f7a9b9fca16fa1b36a0b5e2263a1773ed7ce5d05776b6d48c7fc
- SSDEEP 3072:G5fSqTPGRefDqOL9X/GX/OiqCUBInVWtwihZzm3WuDxSWxjj2FdCX4:G5f1fLt/KWMo4V4wi/zvZ6X4
- MD5 SHA1 SHA512 SSDEEP
AMOGUSVIRUS/dup.py
- SHA256 35d0600af32309e877224d426617df866055ddc7d94b44f6ea6774705ca48844
- MD5 08bafb9ec216cbd7024251e48ef71553
- SHA1 8d9f1aa6ae6418670d34c0135c5cc29f42411545
- SHA512 886a9a45803f4042d97a23008062e0bd6af477bd2b6998e80c888859a55b5837b160709956a89ac4e074f4a74020d759674a1daba31b04f323ca7f3e9ea5066e
- MD5 SHA1 SHA512