Static task
static1
Behavioral task
behavioral1
Sample
Color-Goggles.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Color-Goggles.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Color-Goggles.exe.config
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Color-Goggles.exe.config
Resource
win10v2004-20230221-en
General
-
Target
Color-Goggles-v1.0.1.zip
-
Size
97KB
-
MD5
245ff111148d40d7d6e9ee75617aee06
-
SHA1
1c7deaeb0f8439b88333dc24b2805771932b3b1b
-
SHA256
df58e8638230873e43464eb1a89fd1852dd0fef9128c08472fba99d30e5de8b9
-
SHA512
eddd14c0d96dca3814d7eb66936ef32b4bebf7ac717204646346d1e406d7da681e85f8edf402864f02e827a2dab6a4e493d12bdc3f24e17846f7689a4d0255a2
-
SSDEEP
3072:mcKTRbK0r5slacJ2t5lnP+LgJEf2Ad8CVgl:8TRXsacJ2dnmcKplc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Color-Goggles.exe
Files
-
Color-Goggles-v1.0.1.zip.zip
-
Color-Goggles.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Color-Goggles.exe.config
-
README - Install.txt