Photoshop[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Photoshop.zip
Size

101.6MB
MD5

9a96e9b2c50e12fd1308ae07f00faa29
SHA1

780cfe3e6fe9e6d59ca927e6c1bb0ef59bf8167f
SHA256

d535e91ce4bbe8eb0e8d79530176ac15eef19ca5a59523402c9bbcf0e093183f
SHA512

b9b9252f87ed2d4f97e5d58b779f9ebb23443ec111bcfb6b340062b6bc70d67911758378cb561ebeeb060e87bddefc4e3074b822a23a69ec02d7dc90de0e01ce
SSDEEP

3145728:wTUGprKW6758KyyEUXjD72oyUWS3T/E3cu2tadV:wTUG8W6KKjj9uM/aN2YdV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Photoshop.exe	upx

Files

Photoshop.zip
.zip
AdobeInstaller.dll
Photoshop.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 883KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
libA3264.dll
libI3264.dll