Photo[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Photo.scr
Size

123KB
MD5

aadfe1c65d2f5660a2c2a6a75048742e
SHA1

6f24a89e287526ac7e862d3a59e56c56a01d505f
SHA256

20d0cc1cf16ed908eaeb5bf617b213d28619bb1810577804ec30ebf402c47ec4
SHA512

a18f30c30d5e546a4098cdff81cb4bfdf072270a3f72109f3890f8f74f95670def0b40fe3f0af2d288234009438155b294b926c9cdabe2d5a36412b48971260d
SSDEEP

3072:CT6QFlX/GFwIqfLvkrQgcTbk2y9GUie/Rmp:MGXqfcjuI2GGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Photo.scr

Files

Photo.scr
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ