Static task
static1
Behavioral task
behavioral1
Sample
CI, PL and COA.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
CI, PL and COA.exe
Resource
win10v2004-20230703-en
General
-
Target
CI, PL and COA.exe
-
Size
633KB
-
MD5
5488601cee35afcd9bb0e6f6745d3787
-
SHA1
287805031410b0f496b0639c4d82890302938edd
-
SHA256
6caed3fe67e7752a452ba5b09bfd37255ad9c1f6f3a7a752958b78d3e26fdd27
-
SHA512
228119453d878700a29a29ec8c4d12b11c4f34b9f100b7c34a77b1e4608b2885b25df0c34ba3214e91954fee41f8a42199cc9875c4d9831e784faeb31aad749c
-
SSDEEP
12288:8IPYPfY7uvd+AlpRxdida/1zltUohw+0gCj7D86jAriU7K/ZiBE:8IPYPg6F9vAg1zltMhp//Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CI, PL and COA.exe
Files
-
CI, PL and COA.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 630KB - Virtual size: 630KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ