Static task
static1
Behavioral task
behavioral1
Sample
Trojan.Win32.Amadey.RPQ.exe
Resource
win7-20240903-en
General
-
Target
Trojan.Win32.Amadey.RPQ.MTB-cee2eac13978da0aa15786e04cdb11ad63a7502fa31eccc197e16c28d6fad215N
-
Size
82KB
-
MD5
2e41c417971452fd7377a2a691a58180
-
SHA1
baad2108869a2af978b2e72e493f43de4ad80bc1
-
SHA256
cee2eac13978da0aa15786e04cdb11ad63a7502fa31eccc197e16c28d6fad215
-
SHA512
9df4f35f35df148052134929284be55284256fec2bb2fa8b1e79e77e71a466193106585718b34c9c1976f99f1694cd55d8142a793300d1b6e373574b2f33a6a8
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QB:ymb3NkkiQ3mdBjFIIp9L9QrrA8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trojan.Win32.Amadey.RPQ.MTB-cee2eac13978da0aa15786e04cdb11ad63a7502fa31eccc197e16c28d6fad215N
Files
-
Trojan.Win32.Amadey.RPQ.MTB-cee2eac13978da0aa15786e04cdb11ad63a7502fa31eccc197e16c28d6fad215N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ