Phtoo35la0d01[.]exe | Triage

Resubmissions

14/09/2022, 09:00

220914-kynspadebp 8

11/09/2022, 12:55

220911-p5r6xabeh6 6

Sharing

Copy URL Twitter E-mail

General

Target

Phtoo35la0d01.exe
Size

18.9MB
MD5

608914427ccfb02b7c7b7d7fce3eb008
SHA1

5d281943bd8b9664d47bb3c99a7d74e5deedcb0b
SHA256

5a62cd8dee941e1c52a6a2ec03128a27d2ee0ecef5d2b6afe8f8012c23a2006c
SHA512

6694d467415a0b639216bc4f5087186a6df99b7e627e2f058af2b99b09699c527ba710a803abeee8ed03742df20d0543f2c3958332f19b1dd9aa6f8927ae6dfe
SSDEEP

393216:p64wIf5pNBNdcNyWnfBPCdhjjmOCy2VseXJ2nNg9RYEz2nWcv+5fGd0WF4w:Q2f59N+MdgnVseZ2ni9RZ2n92hGZ4

Score

N/A

Malware Config

Signatures

Files

Phtoo35la0d01.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.7MB - Virtual size: 18.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ