amadey | 92657077ca5c63e456f5755b86eaa3e6074e6feb4a19f43da6c7c0d4acad09f9 | Triage

Sharing

General

Target

92657077ca5c63e456f5755b86eaa3e6074e6feb4a19f43da6c7c0d4acad09f9
Size

4.4MB
MD5

037a0a7fe30cbe7ebc4adbe837bd2404
SHA1

b23a6bf141c736faf36d7bef0f9682c06be609b5
SHA256

92657077ca5c63e456f5755b86eaa3e6074e6feb4a19f43da6c7c0d4acad09f9
SHA512

946c216f589d3c074e3134cf5a9ae00146088f25b7ef93a5e382aa878538c363647bcc0dc28274cfae0564d72a590b293d111dec9fe89b2854141362b649ae80
SSDEEP

6144:c5dzwO5jJFSIijqVSS8LfZujp8Dq2RNyui/O/ah+3oQ9gOU+fzYBb6:cZkqx8Nujp+q2Sui/O/d9gT6

Score

10^/10

amadey

Malware Config

Signatures

Amadey family
amadey

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92657077ca5c63e456f5755b86eaa3e6074e6feb4a19f43da6c7c0d4acad09f9

Files

92657077ca5c63e456f5755b86eaa3e6074e6feb4a19f43da6c7c0d4acad09f9
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ