amatled_0[.]0[.]11_windows_amd64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
amatled_0.0.11_windows_amd64.zip
Size 9.7MB
Sample261107-vbftnsy14j
SHA256 4d2332d7c429d0829e06c2fd51166751ee7ec8771e1c3e30e6fa936c13faf850
MD5 2fe8044dcb3af8aa605a98bef86fa157
SHA1 fbb40aadb37a80c6a5597d6785f6d0940a799875
SHA512 c6ae4ba5a006e362185be2da460dceab6db4c1aa04f6674e302ffdbb9832e920315f0a92bc6bc2fdf9b4be50e85a6cd22775662650726949f51d894beb86b8aa
SSDEEP 196608:oLePOnZgPTHwwaV+zC5GWj01v3WFPf9M7Fp4xxUy6NqgSrO7HPSybOrD8vkA:oamnZqTHjz0G20kTPrOTPSGKD8sA
TLSH
T17FA633406E3F44D838E4EDEBD81AA5B3B70AC8399F660ECB6C18115501367ABCEF59D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/amatled.exe

File Explorer

amatled_0.0.11_windows_amd64.zip

.zip 9.7MB
README.md

2KB
amatled.exe

.exe 29.2MB

amatled_0.0.11_windows_amd64.zip

SHA256 4d2332d7c429d0829e06c2fd51166751ee7ec8771e1c3e30e6fa936c13faf850
MD5 2fe8044dcb3af8aa605a98bef86fa157
SHA1 fbb40aadb37a80c6a5597d6785f6d0940a799875
SHA512 c6ae4ba5a006e362185be2da460dceab6db4c1aa04f6674e302ffdbb9832e920315f0a92bc6bc2fdf9b4be50e85a6cd22775662650726949f51d894beb86b8aa
SSDEEP 196608:oLePOnZgPTHwwaV+zC5GWj01v3WFPf9M7Fp4xxUy6NqgSrO7HPSybOrD8vkA:oamnZqTHjz0G20kTPrOTPSGKD8sA
TLSH
T17FA633406E3F44D838E4EDEBD81AA5B3B70AC8399F660ECB6C18115501367ABCEF59D1
MD5 SHA1 SHA512 SSDEEP TLSH

amatled.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 2339a92651d7a791dec9cfc030aa01627273fec8b49b95977997a2f06271f471
MD5 85dd196fda8f1b4ab367b9a4b3b185de
SHA1 cd53343ff1a3960e3d1e825c84bc53e17cee356e
SHA512 a144a39d0dc3514a59758f4e29c20e7b7b5f2bd2802f202a0c12ea2dff50d0670ffda6fb91e7dff465664fda0038a1c8d3199440e38c94c9a7ac6d5e9b50471e
SSDEEP 196608:bKV9iAvEQRW6N7RrIrrEg73pzXUykAhFytUMZTa:bO0AMQRVZIrr77VWLTa
TLSH
T133675C43E8A148E5C5A9CA34C5218523BF317C468F201BDB7B68F6A46F76BC05DBB790
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

529824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

10.7MB

Virtual Size

10.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17.2MB

Virtual Size

17.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

687KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

269KB

Virtual Size

269KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

amatled_0.0.11_windows_amd64.zip

README.md

amatled.exe

kernel32

generic