PhotoHunt-32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PhotoHunt-32.exe
Size 115KB
Sample260706-myeacsdz21
SHA256 79af5e57303ab6fb317711ba4e61d7f9ebd4ff81b82b518a41ce115553409a73
MD5 c1ced1caa891e99b56b4d236dc6fc1f1
SHA1 62f05a3f5a50b135a396a03de7731de6a4594462
SHA512 7ea5c2dafe77a5c390915d7c21b67d8e52d8ff7ce1907765c525475f5fae4a6390bc827da7b678189f86515ffd0cd51373d68899c4e07c07f595d45db6c66106
SSDEEP 3072:DG3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQC:DgQ+IFCumUGekHRvEuO3go9kfnQ
TLSH
T104B3D012AE439D3FD4916738E9F75BBE7A75FAC14B6305838A10A4318FA27D054F231A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PhotoHunt-32.exe

File Explorer

PhotoHunt-32.exe

.exe 115KB

PhotoHunt-32.exe

IMPHASH 6f0f72e12bdea21b3a946ca4036df56c
SHA256 79af5e57303ab6fb317711ba4e61d7f9ebd4ff81b82b518a41ce115553409a73
MD5 c1ced1caa891e99b56b4d236dc6fc1f1
SHA1 62f05a3f5a50b135a396a03de7731de6a4594462
SHA512 7ea5c2dafe77a5c390915d7c21b67d8e52d8ff7ce1907765c525475f5fae4a6390bc827da7b678189f86515ffd0cd51373d68899c4e07c07f595d45db6c66106
SSDEEP 3072:DG3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQC:DgQ+IFCumUGekHRvEuO3go9kfnQ
TLSH
T104B3D012AE439D3FD4916738E9F75BBE7A75FAC14B6305838A10A4318FA27D054F231A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA QueryPerformanceCounter SetDllDirectoryA SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery

api-ms-win-crt-convert-l1-1-0

mbstowcs wcstombs

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

setlocale __initialize_lconv_for_unsigned_char

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_atexit _initialize_narrow_environment _initialize_wide_environment _initterm _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsprintf fwrite

api-ms-win-crt-string-l1-1-0

strlen strncmp _strdup

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

user32

MessageBoxA

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

PhotoHunt-32.exe

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

user32

generic