Photoshop[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Photoshop.exe
Size

15.2MB
MD5

117eaeea06a755ac55b0fe0647a075cd
SHA1

fd8866eb9320ffe1ec9d68f4fbabd321ceda3b73
SHA256

3cc3f6f7f600d3c0f183c8c7b02818103c72b7ff265bccbcee0a59c061b95b55
SHA512

bed9f7e19551241fb7b8a68054027d7aea465549267dda2eb6778921a2a33a048d6cc2611128176f98c3b586a089653afbce076188ef9d11bd78b9ffbfb06bb8
SSDEEP

196608:Ygmy0+z4wpRn+l3AjLC+XAvMeFsYFJ+PydDC3FqvsK/8qfPPohW8Ev:uAMqR+uXQvMGyFqvsWP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Photoshop.exe

Files

Photoshop.exe
.exe windows x86

e49f41fc4ad14f564edc16eed02e0ee5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetFullPathNameA
FindFirstFileA
GetFileSize
GetDriveTypeA
GetModuleHandleW
GetModuleHandleA
GetProcAddress
SizeofResource
LoadLibraryW
OutputDebugStringA
GetLastError
GlobalFree
GetLocalTime
VirtualFree
CreateFileA
GetFileInformationByHandle
FindNextFileA
GetVolumeInformationA
SetErrorMode
LoadLibraryA
FreeLibrary
GetFileAttributesExA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
CopyFileA
CopyFileExA
MoveFileA
CompareFileTime
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
SystemTimeToFileTime
GetTimeZoneInformation
lstrcmpA
CreateProcessA
GetStdHandle
GlobalMemoryStatus
GetVersionExA
GetSystemInfo
OpenFile
GetWindowsDirectoryA
GetSystemDirectoryA
AreFileApisANSI
CreateFileW
LockResource
LoadResource
FindResourceA
GetDiskFreeSpaceA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetComputerNameA
GlobalDeleteAtom
QueryPerformanceCounter
DebugBreak
OpenEventA
GlobalGetAtomNameA
SetEvent
GetCurrentDirectoryW
lstrlenW
MulDiv
GetModuleFileNameW
_lclose
GetDiskFreeSpaceExA
CloseHandle
GetTempFileNameA
lstrcpyA
GetTickCount
ReadFile
SetFilePointer
GetDateFormatA
CreateDirectoryA
GetTempPathA
lstrcatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTimeFormatA
GetSystemTime
GetModuleFileNameA
GetEnvironmentVariableA
GetExitCodeThread
FreeResource
lstrcpynA
GetACP
GetCPInfo
CompareStringW
GetCurrentThreadId
IsValidCodePage
ResumeThread
CreateMutexA
WriteProfileStringA
FormatMessageA
GetLogicalDriveStringsA
GlobalAddAtomA
GetProfileStringA
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
HeapFree
GetProcessHeap
GetLocaleInfoA
HeapAlloc
Sleep
EnumResourceNamesA
SleepEx
GetProfileIntA
CreateEventA
GlobalSize
InitializeCriticalSection
WaitForSingleObject
CreateThread
DeleteCriticalSection
ResetEvent
EnterCriticalSection
LeaveCriticalSection
_lread
FileTimeToDosDateTime
GetLogicalDrives
SetEndOfFile
_lwrite
GetShortPathNameA
GetFileTime
_llseek
FlushFileBuffers
FindClose
DeleteFileW
GetFileAttributesW
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
FileTimeToSystemTime
lstrlenA
FileTimeToLocalFileTime
FindFirstFileW
IsBadCodePtr
IsBadReadPtr
RaiseException
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
PeekNamedPipe
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsDBCSLeadByteEx
GetSystemDefaultLangID
LoadLibraryExA
SuspendThread
ExitThread
CompareStringA
GetStringTypeW
VirtualAlloc
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
SetStdHandle
GetFullPathNameW
GetOEMCP
GetEnvironmentStringsW
LCMapStringW
LCMapStringA
WriteFile
SetUnhandledExceptionFilter
GetVersion
GetCommandLineA
GetLocaleInfoW
SetEnvironmentVariableA
GetStartupInfoA
GetFileType
HeapCompact

advapi32

RegEnumValueA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
IsTextUnicode
GetSecurityDescriptorDacl
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetFileSecurityA
GetEffectiveRightsFromAclA
RegQueryValueExA
SetFileSecurityA
GetUserNameA

user32

MapWindowPoints
CopyAcceleratorTableA
GetKeyboardState
ToAscii
GetUpdateRgn
GetMessageTime
GetWindowThreadProcessId
EnumChildWindows
InvalidateRgn
DialogBoxParamW
DialogBoxParamA
GetSystemMenu
EnableMenuItem
GetMessageA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
MessageBoxW
GetTopWindow
SetWindowTextW
SendMessageA
IsDlgButtonChecked
CreateWindowExW
GetDoubleClickTime
GetScrollInfo
SetScrollInfo
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SendMessageW
SetMessageExtraInfo
GetClipboardData
GetMessageExtraInfo
ScreenToClient
IntersectRect
GetMenuStringA
FillRect
GetNextDlgTabItem
GetWindowDC
CheckMenuItem
GetMenuItemCount
GetMenuItemID
GetSysColorBrush
OffsetRect
DrawTextA
InflateRect
InvertRect
SetRect
FrameRect
GetNextDlgGroupItem
SetWindowWord
GetCapture
ReleaseCapture
SetCapture
GetWindowWord
GetKeyState
GetClipboardViewer
SetClipboardViewer
BringWindowToTop
ChangeClipboardChain
PostMessageA
GetWindow
DefFrameProcA
SetTimer
GetQueueStatus
AdjustWindowRectEx
RedrawWindow
WindowFromDC
IsChild
GetSubMenu
SetMenu
CreateMenu
RemoveMenu
AppendMenuA
DrawMenuBar
ModifyMenuA
ModifyMenuW
DestroyMenu
UnionRect
LoadCursorA
SetDlgItemTextA
SetMenuItemInfoA
AppendMenuW
GetMenuStringW
InsertMenuA
BeginPaint
EndPaint
SetRectEmpty
LoadAcceleratorsA
PtInRect
ValidateRect
GetWindowTextA
SetWindowTextA
GetClassNameA
CharLowerA
GetActiveWindow
GetMenuItemInfoA
InsertMenuW
GetMenu
CreatePopupMenu
IsRectEmpty
DrawTextW
TranslateMDISysAccel
PostQuitMessage
KillTimer
GetLastActivePopup
GetDlgItem
CharUpperBuffA
CharLowerBuffA
IsMenu
SendDlgItemMessageA
SetCursor
GetCursor
GetDlgItemTextA
FindWindowExA
GetWindowTextW
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
LoadMenuA
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItemTextW
CreateDialogParamA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
RegisterClassW
DrawFocusRect
LoadBitmapA
DefFrameProcW
DefMDIChildProcW
DefMDIChildProcA
DefWindowProcW
DefWindowProcA
CallWindowProcW
CallWindowProcA
TrackPopupMenuEx
GetClassNameW
GetForegroundWindow
SetWindowPlacement
GetUpdateRect
ScrollWindow
GetWindowLongW
SetWindowLongW
GetWindowLongA
SetWindowLongA
GetWindowTextLengthA
DrawEdge
WindowFromPoint
SetActiveWindow
DialogBoxIndirectParamA
MapDialogRect
EndDialog
LoadImageA
CreateIconFromResourceEx
LookupIconIdFromDirectory
EnableWindow
EmptyClipboard
OpenClipboard
CloseClipboard
RegisterClipboardFormatA
IsWindowVisible
InvalidateRect
GetDlgCtrlID
GetPropA
GetParent
RemovePropA
SetPropA
SetParent
GetKeyboardLayout
GetCursorPos
WaitForInputIdle
SetForegroundWindow
FindWindowA
GetFocus
GetDCEx
GetIconInfo
DrawIconEx
GetSysColor
GetClientRect
UpdateWindow
IsZoomed
SystemParametersInfoA
GetDesktopWindow
LoadStringA
wsprintfA
LoadIconA
DestroyIcon
GetWindowPlacement
GetSystemMetrics
GetAsyncKeyState
PeekMessageA
ClientToScreen
GetMenuState
IsIconic
ShowWindow
IsWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
DestroyWindow
GetWindowRect
IsClipboardFormatAvailable
SetWindowPos
SetFocus
IsWindowEnabled
GetDC
ReleaseDC
CharUpperA
GetKeyboardLayoutList
ActivateKeyboardLayout
CreateCursor
DestroyCursor
ShowCursor
SetCursorPos
MessageBeep
CheckDlgButton
IsWindowUnicode

gdi32

GetStockObject
RealizePalette
SelectPalette
GetDIBits
StretchDIBits
PatBlt
GetObjectA
SetBkColor
GetPixel
ExtTextOutA
GetDeviceCaps
SetStretchBltMode
GdiFlush
SetTextColor
DeleteDC
ExtTextOutW
CreateCompatibleDC
GetTextExtentPointW
StretchBlt
CreateFontIndirectA
CreateSolidBrush
GetTextMetricsA
LineTo
MoveToEx
SetBkMode
BitBlt
CreateCompatibleBitmap
CreatePen
SetICMMode
SelectClipRgn
GetTextExtentPointA
SetBitmapBits
Escape
CreateRectRgn
CreateBitmap
GetBitmapBits
SetDIBits
GdiSetBatchLimit
TextOutA
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CreateDiscardableBitmap
GetCurrentObject
SetMapMode
CreateDCA
CreateICA
SetWindowOrgEx
EndDoc
AbortDoc
StartDocA
EndPage
CreateEnhMetaFileA
StartPage
DeleteMetaFile
CloseMetaFile
DeleteEnhMetaFile
CloseEnhMetaFile
SetViewportOrgEx
CreateMetaFileA
GetDCOrgEx
GetClipBox
SetAbortProc
GetSystemPaletteEntries
GetPaletteEntries
SetPaletteEntries
GetClipRgn
CreateBitmapIndirect
SetBrushOrgEx
GetBkColor
CreateRectRgnIndirect
GetTextColor
GetRgnBox
CreateBrushIndirect
CombineRgn
CreateEllipticRgnIndirect
SetROP2
FillRgn
GetKerningPairsA
ExtEscape
EnumFontsA
GetTextCharset
EnumFontFamiliesExA
TextOutW
GetTextFaceA
SetRectRgn
OffsetRgn
PtInRegion
PaintRgn
UnrealizeObject
SetSystemPaletteUse
CreatePalette
AnimatePalette
FrameRgn
CreatePolygonRgn
DeleteObject
SelectObject
SetTextAlign
GetTextAlign
GetBkMode
CreateFontA
Polygon
CreatePatternBrush
RemoveFontResourceA
AddFontResourceA
RoundRect
ExtCreatePen
LineDDA
ExcludeClipRect

shlwapi

PathIsRootA
PathAppendA
PathIsUNCA
PathRemoveExtensionA
PathFindFileNameA
PathIsSameRootA
PathFindExtensionA
PathGetDriveNumberA
PathBuildRootA
PathStripToRootA
PathRemoveFileSpecA
PathAddBackslashA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

mmioCreateChunk
mciSendStringA
mciSendCommandA
mciGetErrorStringA
mmioWrite
mmioClose
mmioAscend
mmioRead
mmioDescend
mciSendCommandW
mciSendStringW
mmioOpenA
mmioOpenW

ole32

RevokeDragDrop
DoDragDrop
GetRunningObjectTable
CreateOleAdviseHolder
CoGetMalloc
WriteFmtUserTypeStg
OleIsCurrentClipboard
OleGetClipboard
OleFlushClipboard
OleSetClipboard
RegisterDragDrop
StgCreateDocfile
CoRegisterClassObject
OleSetAutoConvert
CoRevokeClassObject
OleInitialize
WriteClassStg
CreateDataAdviseHolder
CoFileTimeNow
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SetErrorInfo
SysAllocString
DispGetIDsOfNames
CreateErrorInfo
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SafeArrayDestroy
SafeArrayGetLBound
VariantClear
SafeArrayGetElement
VariantInit
SafeArrayPutElement
SafeArrayCreate
RegisterActiveObject
RevokeActiveObject
LoadRegTypeLi
LoadTypeLi
SafeArrayCopy
DispInvoke

shell32

DragAcceptFiles
SHGetFileInfoA
SHGetDesktopFolder
SHGetMalloc
SHFileOperationA
ShellExecuteA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
FindExecutableA
SHGetPathFromIDListA
SHBrowseForFolderA

ace

ord4
ord5

agm

ord2
ord4
ord3

bib

ord2
ord11
ord4

cooltype

ord54
ord20
ord24
ord21
ord99
ord109
ord46
ord45
ord72
ord42
ord78
ord43
ord28
ord27
ord26
ord2
ord6
ord7
ord85
ord9
ord8
ord93
ord4
ord84
ord3
ord60
ord35
ord50
ord11
ord23
ord51
ord89
ord88
ord87
ord86
ord12
ord53
ord52
ord17
ord55
ord40
ord39
ord38
ord49
ord31
ord30
ord41
ord33
ord29
ord16
ord19
ord68
ord67
ord66
ord97
ord32
ord59
ord106

asn.er

asn_info_0100
asn_exit
asn_init

Exports

Exports

??4ExifTagList@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 11.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 656KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e49f41fc4ad14f564edc16eed02e0ee5

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

shlwapi

version

winmm

ole32

oleaut32

shell32

ace

agm

bib

cooltype

asn.er

Exports

Exports

Sections

.text Size: 11.4MB - Virtual size: 11.4MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 656KB - Virtual size: 1.2MB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 11.4MB - Virtual size: 11.4MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 656KB - Virtual size: 1.2MB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB