Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-PHOTO.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-PHOTO.exe
Resource
win10v2004-20220812-en
General
-
Target
4669a555aee37114a4334221422518b1b98af11372b8f8fdf0fe026d9b9f1fc2
-
Size
128KB
-
MD5
7a356e2183805b0dd0c8c39016e65516
-
SHA1
d395e4b7fd24261040f2e4e10f39019f6e5e05a4
-
SHA256
4669a555aee37114a4334221422518b1b98af11372b8f8fdf0fe026d9b9f1fc2
-
SHA512
4ab91c7b64a78432b30d9643f5f39ca08d5d77ca500d8f192249516a178c0e8a288496766277cf67232e90ee5f96af6a56eb2068e9755672988fa47f1288feda
-
SSDEEP
3072:gnHXMpxcGxFyhQ0bOqYoxIcEWubRNcPe9d8T2l:4HmGY/o0o+hBbnF9GCl
Malware Config
Signatures
Files
-
4669a555aee37114a4334221422518b1b98af11372b8f8fdf0fe026d9b9f1fc2.zip
-
GOLAYA-PHOTO.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ