General

  • Target

    cool.exe

  • Size

    114KB

  • MD5

    0d688b01e87efbe5099e679a03e27ff4

  • SHA1

    7265538d25e37f5eed97e1de3c85a612b5a8808e

  • SHA256

    58ba8b27f1c71a2b4e6bc8fb41e11b839a79ae0f8681833eb7c750bea49a36d7

  • SHA512

    f408a29fabb98290578c5d036cb519ad4466b9c1ea76b513d5e5a4de32e3b22d8bf1f98f2a00cb652d4adb0a3a4db5b277b243d175be942aba7c75d663754b89

  • SSDEEP

    3072:EJZKnPE2YyJzELtyT9yYeY8lNgoiJ+sX8HFvytbWNz:EJZKBI09yYeY4eoiJ+sCFv1

Score
10/10

Malware Config

Signatures

  • Vanilla Rat payload 1 IoCs
  • Vanillarat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cool.exe
    .exe windows x86

    Password: 4

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections