2026-05-28_a654e3dd358e16292ec50a323e6fc799_amadey_hijackloader_vidar_wannacry

General

Target
2026-05-28_a654e3dd358e16292ec50a323e6fc799_amadey_hijackloader_vidar_wannacry
Size 403KB
Sample260528-rrfbasb14z
SHA256 069710119dad7acb9de9a7367e7ae4309cc9a81b349543757212eee6036c07be
MD5 a654e3dd358e16292ec50a323e6fc799
SHA1 7aa37b61c581ce018b85deb5e63d4f017282a495
SHA512 b0dc2dc9511084c930217c08b98813e88e572911bfb62e680c814de3397de38af55b00c1adaa6e12d8db930a43999b6ca0efb65c8b1363792254518d6af63bd2
SSDEEP 6144:PCfTXkxqDbVC92emGoVC9mqXaAoNOcG20bWiT6yj7FzhQXJgzBU4GfjTac:PCa2emGXmYymh7vagS
TLSH
T1E894170922E904E8E6B3963499754152C973BC726B31D6DF12E0C17D9F33BC8AA74F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_a654e3dd358e16292ec50a323e6fc799_amadey_hijackloader_vidar_wannacry

2026-05-28_a654e3dd358e16292ec50a323e6fc799_amadey_hijackloader_vidar_wannacry

.exe 403KB

IMPHASH 3325e12181a2525dc192101472612d6a
SHA256 069710119dad7acb9de9a7367e7ae4309cc9a81b349543757212eee6036c07be
MD5 a654e3dd358e16292ec50a323e6fc799
SHA1 7aa37b61c581ce018b85deb5e63d4f017282a495
SHA512 b0dc2dc9511084c930217c08b98813e88e572911bfb62e680c814de3397de38af55b00c1adaa6e12d8db930a43999b6ca0efb65c8b1363792254518d6af63bd2
SSDEEP 6144:PCfTXkxqDbVC92emGoVC9mqXaAoNOcG20bWiT6yj7FzhQXJgzBU4GfjTac:PCa2emGXmYymh7vagS
TLSH
T1E894170922E904E8E6B3963499754152C973BC726B31D6DF12E0C17D9F33BC8AA74F62
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

2

Major OS version

5

Entry point

10852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

F:\CB\11X_MainQ\BuildResults\bin\Release\chrome_wow_helper.pdb