AMIDEWIN[.]EXE | Triage™

General

Target
AMIDEWIN.EXE
Size 148KB
Sample260723-ghctpsgh22
SHA256 948dbd2bc128f8dc08267e110020fee3ff5de17cf4aaef89372de29623af96fa
MD5 182ec3a59bd847fb1bc3e12a41d48fa6
SHA1 2f548bceb819d3843827c1e218af6708db447d4b
SHA512 91ecc5a76edc2aea4219f68569b54d3e9fe15c2a30a146edc0d09e713feaa739a5c1e7dbfa97e60828696078d43d1f8fd3466234525b099ed6e614e854ac6c4c
SSDEEP 1536:tNFrdLFZ7JxIVhlPBo8Upxwpwf+gHkow3SMT4HOw2htj6oANy/ht+vSMoqEcViWw:Pv7JIhlBAKwf+gWCM4OwyWscSMoqtLe
TLSH
T14AE36C1639D01CB2E861863144B99F21EB37DD38066142A3F79C92D61F897B0AF3D76E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AMIDEWIN.EXE

File Explorer

AMIDEWIN.EXE

.exe 148KB

AMIDEWIN.EXE

IMPHASH e4bef79f59242df9daf28c2c8193c40e
SHA256 948dbd2bc128f8dc08267e110020fee3ff5de17cf4aaef89372de29623af96fa
MD5 182ec3a59bd847fb1bc3e12a41d48fa6
SHA1 2f548bceb819d3843827c1e218af6708db447d4b
SHA512 91ecc5a76edc2aea4219f68569b54d3e9fe15c2a30a146edc0d09e713feaa739a5c1e7dbfa97e60828696078d43d1f8fd3466234525b099ed6e614e854ac6c4c
SSDEEP 1536:tNFrdLFZ7JxIVhlPBo8Upxwpwf+gHkow3SMT4HOw2htj6oANy/ht+vSMoqEcViWw:Pv7JIhlBAKwf+gWCM4OwyWscSMoqtLe
TLSH
T14AE36C1639D01CB2E861863144B99F21EB37DD38066142A3F79C92D61F897B0AF3D76E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

43344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentDirectoryA SetFileAttributesA GetFileAttributesA GetSystemDirectoryA CopyFileA GetCurrentProcess GetTimeZoneInformation CreateProcessA WaitForSingleObject Sleep GetVersionExA DeviceIoControl GetLastError SetFilePointer WriteFile ReadFile CreateFileA SetProcessAffinityMask CloseHandle GetSystemTimeAsFileTime HeapFree HeapAlloc ExitProcess TerminateProcess DeleteFileA GetCommandLineA GetVersion SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc FlushFileBuffers GetProcAddress GetFullPathNameA UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW RtlUnwind SetStdHandle MultiByteToWideChar GetStringTypeA GetStringTypeW GetDriveTypeA GetCPInfo GetACP GetOEMCP LoadLibraryA SetEndOfFile LCMapStringA LCMapStringW CompareStringA CompareStringW SetEnvironmentVariableA ReadConsoleInputA SetConsoleMode GetConsoleMode

user32

wsprintfA

advapi32

StartServiceA OpenServiceA DeleteService CreateServiceA OpenSCManagerA CloseServiceHandle ControlService

Sharing