Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-DEVOCHKA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PHOTO-DEVOCHKA.exe
Resource
win10v2004-20220812-en
General
-
Target
72a45bb2159163059a4395580e2bad76ba94a764e68a623402857dfdf90b1090
-
Size
112KB
-
MD5
9117827471f5a3c90dc46a778e817f53
-
SHA1
13fc3d04f735b87ae7c9f8298c84b0b24d1a842b
-
SHA256
72a45bb2159163059a4395580e2bad76ba94a764e68a623402857dfdf90b1090
-
SHA512
2f66913a840c188c0b6374957a0e500c75d60ff5299a4adbcb7e5e93411d46c7823f53d701cc881e039b5f36fa3ea53c26712a3b3f3331713cc3f595f6dc0fb0
-
SSDEEP
3072:ZDmL7excGxFNPkH9SnbZDaxIVovJ5b6huJMm4pAIC:ZSPeGYPPk0Z+6VyJp6hm4pAIC
Malware Config
Signatures
Files
-
72a45bb2159163059a4395580e2bad76ba94a764e68a623402857dfdf90b1090.zip
-
PHOTO-DEVOCHKA.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ