amatled_0[.]0[.]12_windows_amd64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
amatled_0.0.12_windows_amd64.zip
Size 9.7MB
Sample261107-vbdz3set7l
SHA256 7f89f0a4a4f2d44d6de70b3ddd2d0bb593b20c4e5a4dfb25478f84d86f24aa6e
MD5 877f3dc391a39c31b4f02ad792544564
SHA1 a7d2181fe382bd2f30af2725f2222bc35ed695ca
SHA512 3ad8ba77de455b19197c76b2892c34c987b9a4d7c8858c9c1e75cfabc4ba5976d6bb6464ddf75e445278f70fe81c00780361c9819b1322b918e1812dfeec2b49
SSDEEP 196608:4LwIF64fX02P1UEbxm/ZuQyKhn8vRf7h+EUyFZMbzUsIQeBumV8qyb0qGBPXnp1:EUyX3UQA/ZuQyKGvB7h+EUyob1IY+8q5
TLSH
T132A6334152B0284660697E27E9613F75AF07A528627262FB137EF2D5AC33FE3C65EC01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/amatled.exe

File Explorer

amatled_0.0.12_windows_amd64.zip

.zip 9.7MB
README.md

2KB
amatled.exe

.exe 29.2MB

amatled_0.0.12_windows_amd64.zip

SHA256 7f89f0a4a4f2d44d6de70b3ddd2d0bb593b20c4e5a4dfb25478f84d86f24aa6e
MD5 877f3dc391a39c31b4f02ad792544564
SHA1 a7d2181fe382bd2f30af2725f2222bc35ed695ca
SHA512 3ad8ba77de455b19197c76b2892c34c987b9a4d7c8858c9c1e75cfabc4ba5976d6bb6464ddf75e445278f70fe81c00780361c9819b1322b918e1812dfeec2b49
SSDEEP 196608:4LwIF64fX02P1UEbxm/ZuQyKhn8vRf7h+EUyFZMbzUsIQeBumV8qyb0qGBPXnp1:EUyX3UQA/ZuQyKGvB7h+EUyob1IY+8q5
TLSH
T132A6334152B0284660697E27E9613F75AF07A528627262FB137EF2D5AC33FE3C65EC01
MD5 SHA1 SHA512 SSDEEP TLSH

amatled.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 3323aa41aef866c71beffa8e10d59264e6388b811226cdd415d8c30b538f5612
MD5 fa065f0a631a408411caf541be14185f
SHA1 29752f8f7491afb87708ff76b4b2b402705be72d
SHA512 7a99eaac8029b07c747d7ce3d768553ca4a4a3fb0fb648d4e62232b7b0db56007ab40f6986ab99391685a71025ec5eb56200ee4ffe9f663baebad0cdd17d3169
SSDEEP 196608:7mia49tMR/+BeiyY3bDkX+GwXUykA+FyNU39Tv:7mT4bMRksY3bAXEnwTv
TLSH
T1E0676D43E8A144E5C9A9CA34C5228123BF717C468F2017CB7B68F6A46F7ABD05DBB750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

529824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

10.7MB

Virtual Size

10.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17.2MB

Virtual Size

17.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

687KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

269KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

amatled_0.0.12_windows_amd64.zip

README.md

amatled.exe

kernel32

generic