Static task
static1
Behavioral task
behavioral1
Sample
photo.exe
Resource
win7-20230703-ja
Behavioral task
behavioral2
Sample
photo.exe
Resource
win10-20230703-ja
Behavioral task
behavioral3
Sample
photo.exe
Resource
win10v2004-20230703-ja
General
-
Target
photo.exe
-
Size
169KB
-
MD5
0bff6d4617e4dd2e6ff5c3e86141835b
-
SHA1
0d9eb5340bbce1e2e477bac92dad12aa051263ce
-
SHA256
e805f4ff0f1dbd685c399200b2f306b59c79deedc350bfeafbeaeef3b7db7973
-
SHA512
f04e20e62c6480674d97ee1b7448ca6b10e7f65f1f1926eed86c873abb8f71b1274211933b0ab780bf9a5acd9c6d39ec6412d0f59d747d4186379d86782c1007
-
SSDEEP
3072:vvigV6h0hvnlOhMiwsf7/f98DTFnih0hvnlOhMiwsf7/f98GwS:/hnlHivf7tcTF9hnlHivf7tKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource photo.exe
Files
-
photo.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 29.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE