Static task
static1
Behavioral task
behavioral1
Sample
PHOTOSCO.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
PHOTOSCO.exe
Resource
win10v2004-20220901-en
General
-
Target
PhotosCompanyVehicle_778782372763211.img
-
Size
1.4MB
-
MD5
4fd5b22ff03724e8b212d1dd0c8e04ce
-
SHA1
938e314825ba5fc1a368d9d1edc7dfbab9b2e604
-
SHA256
6a35d98639b25d368444fbd5e02d0f3e390b1628ba278b52b0a12fe0259f8f43
-
SHA512
cf682d482849e33871d7afc6e72b7e439ec8f7c91d30493d4daecfd1b720c0e2435918c4d6b116605cbd61e3b090d7731eaaf539e1530a813f920e166c1b4b86
-
SSDEEP
12288:l4fEu5A/E0sBMsXVd+FAqZ9jLtbBgk6tLD9qj8je0LpcphwsG1cC7aMaF:t1sBLTerrat3sj87piwsCcC7aM
Malware Config
Signatures
Files
-
PhotosCompanyVehicle_778782372763211.img.iso
-
PHOTOSCO.BTA.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 839KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ