amadey | Combo Essentials v1[.]2 - Coded By MR[.]ViPeR[.]exe

General

Target
Combo Essentials v1.2 - Coded By MR.ViPeR.exe
Size 5.9MB
Sample250529-relybacp91
SHA256 326290d910bcd9cb85ca8bc172c9f8589f7659794a824d30fccd7ca2a047a39e
MD5 4cc6daa19942b8c82305ddda8b0d76e3
SHA1 5152280de73d109982fa461b45f25fb268c70331
SHA512 cb8ebcbbd7c9ddc87c20da8e16d6f762a5b0ffb330711701cff843b156638ae8dd1edb1fca0ceaf50b2abf0476f356c853a6861b08889235b4e379050c1158f9
SSDEEP 98304:Pi2lXLLLi3f7acRfWjygg3mM8DWwsCfRIRYL5N7U+uIm/So:PVl7q3DBWyz8DWwsCJIRYLv7U+bm/S
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

amadey

Malware Config

Signatures

Amadey family
amadey

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Combo Essentials v1.2 - Coded By MR.ViPeR.exe

File Explorer

Combo Essentials v1.2 - Coded By MR.ViPeR.exe

.exe 5.9MB

Combo Essentials v1.2 - Coded By MR.ViPeR.exe

IMPHASH 223f8057932cb61043b0989210626737
SHA256 326290d910bcd9cb85ca8bc172c9f8589f7659794a824d30fccd7ca2a047a39e
MD5 4cc6daa19942b8c82305ddda8b0d76e3
SHA1 5152280de73d109982fa461b45f25fb268c70331
SHA512 cb8ebcbbd7c9ddc87c20da8e16d6f762a5b0ffb330711701cff843b156638ae8dd1edb1fca0ceaf50b2abf0476f356c853a6861b08889235b4e379050c1158f9
SSDEEP 98304:Pi2lXLLLi3f7acRfWjygg3mM8DWwsCfRIRYL5N7U+uIm/So:PVl7q3DBWyz8DWwsCJIRYLv7U+bm/S
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24172

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellExecuteW

kernel32

TlsSetValue WriteConsoleW WriteFile CreateFileW LoadLibraryA CloseHandle GetCurrentDirectoryW GetProcAddress FreeLibrary EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess HeapSize RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue RtlUnwind TlsFree LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap

Sharing