86a51f46306d7880cddd8445a2a3d59a | Triage

Sharing

General

Target

86a51f46306d7880cddd8445a2a3d59a
Size

99KB
MD5

86a51f46306d7880cddd8445a2a3d59a
SHA1

b70581ec14843b0130b95262150b47faf87df11e
SHA256

dd5f87df448fb2348d2dd4c0bbfd8afd6265a13d55082ad92f5ac8a2413897fe
SHA512

0336d5b01e94d1b45dd1dd56e10fb6f0cfd609a97493886652e6dae82a686be55a55fb86d62c6fa6cf8df8e98a6a6fe4590580a9991cf7c5913fca38bfc9971d
SSDEEP

3072:O47excGxFLPkH9SnbZDaIcsMYwcWlRZ7LTMF+L7Dp9:O+eGYtPk0Z+KqhEF+L7Dr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PHOTO-DEVOCHKA.exe

Files

86a51f46306d7880cddd8445a2a3d59a
.zip
PHOTO-DEVOCHKA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ