photoloader[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

photoloader.zip
Size

174KB
MD5

b108a22d350dfbbdc6a071c831dad3e5
SHA1

a0cb8912247dada560f34fcfb22dfb0d6c4785ea
SHA256

dc8e64794ac5e4b9b4495a936a5a001c09b86dc4774d184491fec192918146c7
SHA512

3f55fff091301bc9cc3971b0b05599f63fcd1e502a3336de270f0236c960d630d9ec1205ff62d34ec317f8b922d2f5eeca2119636a4b006b62958f721640773a
SSDEEP

3072:Xg1IuDce5SI3MUYe11Z7DzOIVXlVAGzjEIv7miwK34uP5QH/piKahh0OvJj:Qke4WD7/VXDIIMK3T+hEh0OR

Score

N/A

Malware Config

Signatures

Files

photoloader.zip
.zip
pachow.dll
.dll windows x64

a7e172f12b374d022cab5f2ca4805b17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_access
_aligned_malloc
_amsg_exit
_errno
_initterm
_lock
_rmtmp
_setjmp
_stricmp
_strdup
_time64
_unlock
abort
bsearch
calloc
exit
fclose
fflush
fgetc
fgets
fopen
fputc
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
longjmp
malloc
memcpy
memmove
memset
putc
putchar
qsort
realloc
rand
rewind
srand
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
strtol
strtoul
tan
tmpfile
tolower
ungetc
vfprintf
wcslen

Exports

Exports

hD_COLOR_MAP_X11
hZN2GD5Image10CreateFromEP6_iobuf
hZN2GD5Image10CreateFromERSi
hZN2GD5Image10CreateFromEiPv
hdAffineApplyToPointF
hdAffineConcat
hdAffineEqual
hdAffineExpansion
hdAffineFlip
hdAffineIdentity
hdAffineInvert
hdAffineRectilinear
hdAffineRotate
hdAffineScale
hdAffineShearHorizontal
hdAffineShearVertical
hdAffineTranslate
hdAlphaBlend
hdClearErrorMethod
hdColorMapLookup
hdDPExtractData
hdExtraVersion
hdFTUseFontConfig
hdFontCacheSetup
hdFontCacheShutdown
hdFontGetGiant
hdFontGetLarge
hdFontGetMediumBold
hdFontGetSmall
hdFontGetTiny
hdFontGiant
hdFontLarge
hdFontMediumBold
hdFontSmall
hdFontTiny
hdFree
hdFreeFontCache
hdImageAABlend
hdImageAlphaBlending
hdImageArc
hdImageAvif
hdImageAvifCtx
hdImageAvifEx
hdImageAvifPtr
hdImageAvifPtrEx
hdImageBmp
hdImageBmpCtx
hdImageBmpPtr
hdImageBoundsSafe
hdImageBrightness
hdImageChar
hdImageCharUp
hdImageClone
hdImageColor
hdImageColorAllocate
hdImageColorAllocateAlpha
hdImageColorClosest
hdImageColorClosestAlpha
hdImageColorClosestHWB
hdImageColorDeallocate
hdImageColorExact
hdImageColorExactAlpha
hdImageColorMatch
hdImageColorReplace
hdImageColorReplaceArray
hdImageColorReplaceCallback
hdImageColorReplaceThreshold
hdImageColorResolve
hdImageColorResolveAlpha
hdImageColorTransparent
hdImageCompare
hdImageContrast
hdImageConvolution
hdImageCopy
hdImageCopyGaussianBlurred
hdImageCopyMerge
hdImageCopyMergeGray
hdImageCopyResampled
hdImageCopyResized
hdImageCopyRotated
hdImageCreate
hdImageCreateFromAvif
hdImageCreateFromAvifCtx
hdImageCreateFromAvifPtr
hdImageCreateFromBmp
hdImageCreateFromBmpCtx
hdImageCreateFromBmpPtr
hdImageCreateFromFile
hdImageCreateFromGd
hdImageCreateFromGd2
hdImageCreateFromGd2Ctx
hdImageCreateFromGd2Part
hdImageCreateFromGd2PartCtx
hdImageCreateFromGd2PartPtr
hdImageCreateFromGd2Ptr
hdImageCreateFromGdCtx
hdImageCreateFromGdPtr
hdImageCreateFromGif
hdImageCreateFromGifCtx
hdImageCreateFromGifPtr
hdImageCreateFromHeif
hdImageCreateFromHeifCtx
hdImageCreateFromHeifPtr
hdImageCreateFromJpeg
hdImageCreateFromJpegCtx
hdImageCreateFromJpegCtxEx
hdImageCreateFromJpegEx
hdImageCreateFromJpegPtr
hdImageCreateFromJpegPtrEx
hdImageCreateFromPng
hdImageCreateFromPngCtx
hdImageCreateFromPngPtr
hdImageCreateFromPngSource
hdImageCreateFromTga
hdImageCreateFromTgaCtx
hdImageCreateFromTgaPtr
hdImageCreateFromTiff
hdImageCreateFromTiffCtx
hdImageCreateFromTiffPtr
hdImageCreateFromWBMP
hdImageCreateFromWBMPCtx
hdImageCreateFromWBMPPtr
hdImageCreateFromWebp
hdImageCreateFromWebpCtx
hdImageCreateFromWebpPtr
hdImageCreateFromXbm
hdImageCreateFromXpm
hdImageCreatePaletteFromTrueColor
hdImageCreateTrueColor
hdImageCrop
hdImageCropAuto
hdImageCropThreshold
hdImageDashedLine
hdImageDestroy
hdImageEdgeDetectQuick
hdImageEllipse
hdImageEmboss
hdImageFile
hdImageFill
hdImageFillToBorder
hdImageFilledArc
hdImageFilledEllipse
hdImageFilledPolygon
hdImageFilledRectangle
hdImageFlipBoth
hdImageFlipHorizontal
hdImageFlipVertical
hdImageGaussianBlur
hdImageGd
hdImageGd2
hdImageGd2Ptr
hdImageGdPtr
hdImageGetClip
hdImageGetInterpolationMethod
hdImageGetPixel
hdImageGetTrueColorPixel
hdImageGif
hdImageGifAnimAdd
hdImageGifAnimAddCtx
hdImageGifAnimAddPtr
hdImageGifAnimBegin
hdImageGifAnimBeginCtx
hdImageGifAnimBeginPtr
hdImageGifAnimEnd
hdImageGifAnimEndCtx
hdImageGifAnimEndPtr
hdImageGifCtx
hdImageGifPtr
hdImageGrayScale
hdImageHeif
hdImageHeifCtx
hdImageHeifEx
hdImageHeifPtr
hdImageHeifPtrEx
hdImageInterlace
hdImageJpeg
hdImageJpegCtx
hdImageJpegPtr
hdImageLine
hdImageMeanRemoval
hdImageNegate
hdImageNeuQuant
hdImageOpenPolygon
hdImagePaletteCopy
hdImagePaletteToTrueColor
hdImagePixelate
hdImagePng
hdImagePngCtx
hdImagePngCtxEx
hdImagePngEx
hdImagePngPtr
hdImagePngPtrEx
hdImagePngToSink
hdImagePolygon
hdImageRectangle
hdImageRotateInterpolated
hdImageSaveAlpha
hdImageScale
hdImageScatter
hdImageScatterColor
hdImageScatterEx
hdImageSelectiveBlur
hdImageSetAntiAliased
hdImageSetAntiAliasedDontBlend
hdImageSetBrush
hdImageSetClip
hdImageSetInterpolationMethod
hdImageSetPixel
hdImageSetResolution
hdImageSetStyle
hdImageSetThickness
hdImageSetTile
hdImageSharpen
hdImageSmooth
hdImageSquareToCircle
hdImageString
hdImageString16
hdImageStringFT
hdImageStringFTCircle
hdImageStringFTEx
hdImageStringTTF
hdImageStringUp
hdImageStringUp16
hdImageTiff
hdImageTiffCtx
hdImageTiffPtr
hdImageTrueColorToPalette
hdImageTrueColorToPaletteSetMethod
hdImageTrueColorToPaletteSetQuality
hdImageWBMP
hdImageWBMPCtx
hdImageWBMPPtr
hdImageWebp
hdImageWebpCtx
hdImageWebpEx
hdImageWebpPtr
hdImageWebpPtrEx
hdImageXbmCtx
hdLayerMultiply
hdLayerOverlay
hdMajorVersion
hdMinorVersion
hdNewDynamicCtx
hdNewDynamicCtxEx
hdNewFileCtx
hdNewSSCtx
hdReleaseVersion
hdSetErrorMethod
hdSupportsFileType
hdTransformAffineBoundingBox
hdTransformAffineCopy
hdTransformAffineGetImage
init

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
run.bat

Sharing

General

Malware Config

Signatures

Files

a7e172f12b374d022cab5f2ca4805b17

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 217KB - Virtual size: 217KB

.data Size: 123KB - Virtual size: 123KB

.rdata Size: 48KB - Virtual size: 47KB

.pdata Size: 7KB - Virtual size: 6KB

.xdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 4KB

.edata Size: 7KB - Virtual size: 7KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 16KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 217KB - Virtual size: 217KB

.data
Size: 123KB - Virtual size: 123KB

.rdata
Size: 48KB - Virtual size: 47KB

.pdata
Size: 7KB - Virtual size: 6KB

.xdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 7KB - Virtual size: 7KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 16KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 2KB