3DCoatGL64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3DCoatGL64.exe
Size

13.7MB
MD5

33d9a61059251432d01365ece4afd89f
SHA1

d69aeb8f2ce1e0a169e2de2aa58ce0e43e1e5945
SHA256

b0a72e5b26ccf897c37a2328f24b52ee875e6cbd8e8898aba2f4aad18b832ebf
SHA512

7fba138d4bddcf27a01105230779a3f657ddea2915fb156f34e2464c19a766000e4e7355ff9f9325cb7518829648b304ecc6803edaedd035f9d4bfc525ac2827
SSDEEP

393216:iSQud3UWomKKvK8GbXMPTdMJK1BbY516Kug:iSQSVKugTaaK1BVKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3DCoatGL64.exe

Files

3DCoatGL64.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

....
Size: - Virtual size: 30.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

....
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE