AMEWizard.pdb
Static task
static1
1 signatures
General
-
Target
AME Wizard Beta.zip
-
Size
10.2MB
-
MD5
511632bac24aa554f91577526a582299
-
SHA1
3cd19b20965cbc9a5e856736f8afc1ec5f24573a
-
SHA256
1575980d2b65bbcab8dc4d0d6a54d8af4d0d7f0c518a73a3ad1748f306430ee3
-
SHA512
890067e49cb12bf626af85ce9c77144892200cb64cf5f32059ec6a1e320584edf8b2b9945b7cfe115eacf726c1a775ecd089bd89e4259651da1de717cb050f3f
-
SSDEEP
196608:X/xj6CCjGrD27fBNxgELCJfUtIEJ1I9LkJckGYHFKID0wr7h0EzhfO2TJxzEW+u1:X5j69buEqwckGYIK0g7SqhW2r43uuU
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AME Wizard Beta.exe
Files
-
AME Wizard Beta.zip.zip
-
AME Wizard Beta.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 17.4MB - Virtual size: 17.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ