| 在线病毒检测器 | v.1.0.179.174 |
| 数据库版本: | 2024-06-13 16:00:39 |
Amadey是一种强大的Windows信息窃取威胁，以其持久性机制、模块化设计和执行各种恶意任务的能力而闻名。它通常通过钓鱼电子邮件或恶意下载方式侵入系统。一旦进入系统，Amadey可以捕获敏感信息，如登录凭据、个人数据和财务详情。其模块化结构允许威胁行为者自定义其功能，使其成为网络犯罪武器中的多功能工具。
| File | Dctooux.exe |
| 已检查 | 2024-06-13 13:56:19 |
| MD5 | b301aadbc50a1ab085f8ef2268aed5e2 |
| SHA1 | 435d32f0176818fc8bdcced29b58e359894b7f27 |
| SHA256 | 7b4dc90b59760320253596a753556de932a32fd1967726b7321a0095760f7bcf |
| SHA512 | 698c8ca820f1e973d3671243eee4aeaec93a52711577ec885be89018cefdb3fed992995c210c9e78b06ef2b134fa60cc8406e87862357613282102bf76cb299d |
| Imphash | 759b6088a173126a12a6f044026a6925 |
| File Size | 397824 bytes |
Gridinsoft能够识别并消除Trojan.Win32.Amadey.tr，无需进一步的用户干预。
| FileVersions | 76.23.27.13 |
| InternalName | Storm |
| FileDescription | Line |
| LegalCopyright | Copyrights (C) 2023, fulletienen |
| OriginalFilenames | GileraScooters |
| ProductName | Viejestedios |
| ProductVersions | 68.51.78.19 |
| Translation | 0x16fe 0x06da |
 |
6399e5b02aa9ccf05207f108d122f385 27d041a43177618d7bd4cdbe6adb4ae3 c8b4a4a4a4a494e0 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004043ff |
| Compilation: | 2023-10-10 14:19:53 |
| Checksum: | 0x00069e1c (Actual: 0x00069e1c) |
| OS Version: | 5.1 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 4 |
| Imports: | KERNEL32, USER32, GDI32, ADVAPI32, WINHTTP, |
| Exports: | 0 |
| Resources: | 30 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00010eaa | 0x00011000 | 0a1003efa98016c7cf15d700d9260e08 | 6.70 |
| .rdata | 0x00012000 | 0x00006e50 | 0x00007000 | 296f3eef47f0b3df0be50e3c45f969a8 | 4.77 |
| .data | 0x00019000 | 0x0026b368 | 0x0003b600 | 7341a2b93820e963ca73fb7d60d7d38a | 7.92 |
| .rsrc | 0x00285000 | 0x0000d748 | 0x0000d800 | 86de5e4024d63026ae482482463f20ff | 4.51 |
