Static task
static1
Behavioral task
behavioral1
Sample
COA.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
COA.exe
Resource
win10v2004-20230703-en
General
-
Target
COA.zip
-
Size
521KB
-
MD5
f7e3726f0758de244474cf21d4cb9b1c
-
SHA1
89d9522c2a8b90271f81469ab09877e9b6456570
-
SHA256
7edaf845a36914859d373e74ffffec17af5c75a35c1e0bb9f0aa842401a016e5
-
SHA512
2c7b1ef1d71a80506bd78cf5888bb608412a3cde9bd9b126df13daf4c02849137687e4b41f15cbb1722864991be1d0ab8e621dc479c8dcd9e74e3627a1fb8bc3
-
SSDEEP
12288:tvj/DihSMrOEgqd+pATlUgCnpAByhviE4+qEu4c2trP5XREaED2b/Bm:tb+hzngC9TlULvd4/EcsFREem
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/COA.exe
Files
-
COA.zip.zip
-
COA.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 623KB - Virtual size: 622KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ