Amo6EIx[.]exe | Triage

Sharing

General

Target

Amo6EIx.exe
Size

2.3MB
MD5

431299ffe4e47d32965437eeee7f98da
SHA1

b2c8a8b4e732800458a1ffa4592e9927ad5c52e1
SHA256

f22506eb7a9c98ebb8337353f68358d53025e3e50d14b5aa6dc4588bf35e0743
SHA512

57113e862b4e2c7051c54557d6d678978e2dc8554b887da6873e735cff5368f99d037187576b5ceb77139282b79d4e938636537c3479a476833854b32f66feb5
SSDEEP

49152:5Rxbb0k71+FIg4/vj8d5E+PpfLUZmDa2ER0vNgtaQn9Cl2Ev:F/03FIgcCfxDRwkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Amo6EIx.exe

Files

Amo6EIx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ