Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-PHOTO.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
GOLAYA-PHOTO.exe
Resource
win10v2004-20220812-en
General
-
Target
32818f160ff571ce827034307ae5dcd588c72c48c25ed9e7a93dda8bcf57f47c
-
Size
128KB
-
MD5
b6d5cbada218e3a2b2ed5ffcf53b95f5
-
SHA1
cc378448ac10aba1c735d7a9428d30c4d0460b1c
-
SHA256
32818f160ff571ce827034307ae5dcd588c72c48c25ed9e7a93dda8bcf57f47c
-
SHA512
8ce8995f41457b31ac02ce6ab9eca299a56f2cb792cf2e0677780fd65f1711cf1e41439e45ea8d7c028cd5a6aa7dbcc834a4a8960f8545aab52df279cab60de0
-
SSDEEP
3072:unHXMpxcGxFyhQ0bOqYoxIcEWubRNcPe9d8T2M:KHmGY/o0o+hBbnF9GCM
Malware Config
Signatures
Files
-
32818f160ff571ce827034307ae5dcd588c72c48c25ed9e7a93dda8bcf57f47c.zip
-
GOLAYA-PHOTO.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ