amatled_0[.]0[.]13_windows_amd64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
amatled_0.0.13_windows_amd64.zip
Size 9.7MB
Sample261107-vbcf9adt2z
SHA256 354f41f4b2d6f82f1dcc88d8b2b51868835e76484d5a5d56c74754d40f720490
MD5 4e0d5cb476d0817aaa5507155901f332
SHA1 774c639cd86373be83cee472be70879159ff49c0
SHA512 14607bd6162539518474c353d67b50c25853e533043b4dc53f52409e9b34ed0e63cd8178e6cc522820718972464f64ab771c7453ec9729f1a5c4dbde682a6535
SSDEEP 196608:PfqTQuw/HV56xfZlHbe8G5HqOHU909QhP92xFPc5EoUI5M06VFJuL6cO:6TOd5wS/H09fhPqqL5M06V26cO
TLSH
T1A6A63368D7D2DC884267B57F625D15D4B0D3349CBC1283733E68A187812E1FB89BACB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/amatled.exe

File Explorer

amatled_0.0.13_windows_amd64.zip

.zip 9.7MB
README.md

2KB
amatled.exe

.exe 29.2MB

amatled_0.0.13_windows_amd64.zip

SHA256 354f41f4b2d6f82f1dcc88d8b2b51868835e76484d5a5d56c74754d40f720490
MD5 4e0d5cb476d0817aaa5507155901f332
SHA1 774c639cd86373be83cee472be70879159ff49c0
SHA512 14607bd6162539518474c353d67b50c25853e533043b4dc53f52409e9b34ed0e63cd8178e6cc522820718972464f64ab771c7453ec9729f1a5c4dbde682a6535
SSDEEP 196608:PfqTQuw/HV56xfZlHbe8G5HqOHU909QhP92xFPc5EoUI5M06VFJuL6cO:6TOd5wS/H09fhPqqL5M06V26cO
TLSH
T1A6A63368D7D2DC884267B57F625D15D4B0D3349CBC1283733E68A187812E1FB89BACB6
MD5 SHA1 SHA512 SSDEEP TLSH

amatled.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 08d901aa7b92aafb6029831151ed845b70e8fb4b975818eec2e5ce0a0d7dcefd
MD5 75891dfac292032264fa81839fcc29d3
SHA1 46c3033e294a4767dfc9ebbc1f84df0baf803e87
SHA512 03709cdaa648f25ec52d211c2ae903710e8c1f6240b9278e68553747a14fd13a34b694e9c31589a20310c5cea5a2a9741d8b9787aa2996d438d0d9456ff848de
SSDEEP 196608:XZwHveHLnxUd0U/nxM0kmHrWffjXUykA+wyjUBWAyTp:XZ4ernx54M0kqyfL/sT
TLSH
T1A4675B43E8A104E6C5A9D934C522C523BF317C468B2017DB3B68B6647F7ABC06EBB754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

529824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

10.7MB

Virtual Size

10.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17.2MB

Virtual Size

17.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

687KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

270KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

amatled_0.0.13_windows_amd64.zip

README.md

amatled.exe

kernel32

generic