Overview
overview
7Static
static
3CoagulaLight1666.zip
windows7-x64
1CoagulaLight1666.zip
windows10-2004-x64
1Filters/BW...00.bmp
windows7-x64
1Filters/BW...00.bmp
windows10-2004-x64
7Filters/BW...x2.bmp
windows7-x64
1Filters/BW...x2.bmp
windows10-2004-x64
7Filters/BW...00.bmp
windows7-x64
1Filters/BW...00.bmp
windows10-2004-x64
7Filters/BW...95.bmp
windows7-x64
1Filters/BW...95.bmp
windows10-2004-x64
7Filters/BW...90.bmp
windows7-x64
1Filters/BW...90.bmp
windows10-2004-x64
7Filters/BW...85.bmp
windows7-x64
1Filters/BW...85.bmp
windows10-2004-x64
7Filters/BW...75.bmp
windows7-x64
1Filters/BW...75.bmp
windows10-2004-x64
7Filters/BW...65.bmp
windows7-x64
1Filters/BW...65.bmp
windows10-2004-x64
7Filters/BW...50.bmp
windows7-x64
1Filters/BW...50.bmp
windows10-2004-x64
7Filters/BW...15.bmp
windows7-x64
1Filters/BW...15.bmp
windows10-2004-x64
7Filters/BW...25.bmp
windows7-x64
1Filters/BW...25.bmp
windows10-2004-x64
7Filters/BW...40.bmp
windows7-x64
1Filters/BW...40.bmp
windows10-2004-x64
7Filters/BW...50.bmp
windows7-x64
1Filters/BW...50.bmp
windows10-2004-x64
7Filters/BW...60.bmp
windows7-x64
1Filters/BW...60.bmp
windows10-2004-x64
7Filters/BW...75.bmp
windows7-x64
1Filters/BW...75.bmp
windows10-2004-x64
7Static task
static1
Behavioral task
behavioral1
Sample
CoagulaLight1666.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
CoagulaLight1666.zip
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Filters/BW/Amp 100-50-100.bmp
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Filters/BW/Amp 100-50-100.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Filters/BW/Amp 50-100-50-0-50 x2.bmp
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Filters/BW/Amp 50-100-50-0-50 x2.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Filters/BW/Amp A00 R100.bmp
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Filters/BW/Amp A00 R100.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Filters/BW/Amp A05 R95.bmp
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Filters/BW/Amp A05 R95.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Filters/BW/Amp A10 R90.bmp
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Filters/BW/Amp A10 R90.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Filters/BW/Amp A15 R85.bmp
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Filters/BW/Amp A15 R85.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Filters/BW/Amp A25 R75.bmp
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Filters/BW/Amp A25 R75.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
Filters/BW/Amp A35 R65.bmp
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
Filters/BW/Amp A35 R65.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
Filters/BW/Amp A50 R50.bmp
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
Filters/BW/Amp A50 R50.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
Filters/BW/EQ LP C15.bmp
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
Filters/BW/EQ LP C15.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
Filters/BW/EQ LP C25.bmp
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
Filters/BW/EQ LP C25.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
Filters/BW/EQ LP C40.bmp
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
Filters/BW/EQ LP C40.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
Filters/BW/EQ LP C50.bmp
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
Filters/BW/EQ LP C50.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral29
Sample
Filters/BW/EQ LP C60.bmp
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
Filters/BW/EQ LP C60.bmp
Resource
win10v2004-20230915-en
Behavioral task
behavioral31
Sample
Filters/BW/EQ LP C75.bmp
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
Filters/BW/EQ LP C75.bmp
Resource
win10v2004-20230915-en
General
-
Target
CoagulaLight1666.zip
-
Size
1.6MB
-
MD5
6f5c264f09f8e313409d399d07ca9a5a
-
SHA1
246b0d50ff7ca83a83160a4b2ec68b917cfc6c84
-
SHA256
02365c0d759ceecc193a5dfa8e96561e703c0aaa793a5fba277bac5d2ce2dd18
-
SHA512
7b40b407c8fdedbd6ee0fccd0bec7b3fb89d045634b4cdbc28fc3ff5732def15d8a82444ef2a4375cabe080c26b036d735ccbce3ee619548cc26e6ea331af7da
-
SSDEEP
49152:kXzXYJJDVAwbL1/FFC1wMspCDTIgxUdzlncP8Pbg+nt:kXUJJVnns1wMqy+dtzvnt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CoagulaLight.exe
Files
-
CoagulaLight1666.zip.zip
-
Coagula-helpfile.pdf.pdf
-
CoagulaLight.exe.exe windows:4 windows x86
ee2033935923a7574d810c9e445bb8d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ord6
winmm
waveOutGetErrorTextA
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutRestart
waveOutPause
waveOutWrite
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutPrepareHeader
kernel32
CreateFileA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
VirtualQuery
InterlockedExchange
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
HeapSize
LCMapStringW
LCMapStringA
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetCPInfo
GetACP
GetCurrentProcess
TerminateProcess
ExitProcess
WideCharToMultiByte
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
TlsAlloc
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetCommandLineA
GetStartupInfoA
SetEndOfFile
DeleteFileA
GetFileAttributesA
CreateDirectoryA
DeleteCriticalSection
RtlUnwind
RaiseException
HeapReAlloc
HeapFree
HeapAlloc
GetLocaleInfoA
VirtualProtect
GetSystemInfo
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetTimeZoneInformation
SetLastError
GetShortPathNameA
GetLongPathNameA
GetVersionExA
lstrlenA
LocalAlloc
GlobalFree
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetLocalTime
FindFirstFileA
FindNextFileA
FindClose
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
GetCurrentDirectoryA
GetLastError
FormatMessageA
GetTickCount
MulDiv
Sleep
PeekNamedPipe
InterlockedExchangeAdd
InterlockedIncrement
InterlockedDecrement
GetFileSize
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetOEMCP
user32
IsMenu
RemoveMenu
wsprintfA
BringWindowToTop
ShowScrollBar
SetScrollPos
GetDlgItemInt
SetDlgItemInt
GetCursorPos
ChildWindowFromPoint
IsChild
GetSysColor
InvalidateRect
GetScrollPos
GetWindowLongA
DestroyMenu
DeferWindowPos
EndDeferWindowPos
GetClipboardData
FillRect
InvertRect
GetDlgCtrlID
SetTimer
GetDlgItemTextA
DeleteMenu
GetWindowPlacement
IsIconic
DialogBoxParamA
SetWindowTextA
GetActiveWindow
LoadImageA
InsertMenuItemA
GetMenuItemInfoA
SetMenuItemInfoA
PeekMessageA
SendMessageA
ModifyMenuA
BeginDeferWindowPos
CreatePopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetForegroundWindow
GetParent
SetForegroundWindow
SetDlgItemTextA
OffsetRect
EndDialog
GetSubMenu
EnableMenuItem
CheckMenuItem
GetMenuItemCount
IsClipboardFormatAvailable
LoadIconA
RegisterClassExA
LoadMenuA
SetMenu
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
IsWindowVisible
CreateWindowExA
CreateDialogParamA
PostQuitMessage
DestroyWindow
WinHelpA
GetClassLongA
SetWindowLongA
SetCursor
GetSystemMetrics
GetScrollInfo
SetScrollInfo
KillTimer
ReleaseCapture
SetCapture
DefWindowProcA
SetRectEmpty
SetRect
IntersectRect
DrawFocusRect
MessageBoxA
CopyRect
GetClientRect
IsRectEmpty
LoadCursorA
UpdateWindow
IsDlgButtonChecked
MoveWindow
PtInRect
ShowWindow
GetDlgItem
EnableWindow
CheckDlgButton
GetAsyncKeyState
CheckRadioButton
SendDlgItemMessageA
BeginPaint
EndPaint
GetDC
ReleaseDC
GetWindowRect
ScreenToClient
SetWindowPos
SetFocus
MapWindowPoints
PostMessageA
GetMenu
LoadStringA
gdi32
GetObjectA
CreateDIBSection
SetDIBits
GetDIBColorTable
SetBkColor
GetTextExtentPoint32A
SetStretchBltMode
StretchBlt
CreatePen
SetROP2
DeleteObject
SelectObject
CreateSolidBrush
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
LineTo
MoveToEx
Ellipse
Rectangle
CreateCompatibleBitmap
CreateFontIndirectA
GetDeviceCaps
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
advapi32
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STLPORT_ Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Filters/BW/Amp 100-50-100.bmp
-
Filters/BW/Amp 50-100-50-0-50 x2.bmp
-
Filters/BW/Amp A00 R100.BMP
-
Filters/BW/Amp A05 R95.BMP
-
Filters/BW/Amp A10 R90.BMP
-
Filters/BW/Amp A15 R85.BMP
-
Filters/BW/Amp A25 R75.BMP
-
Filters/BW/Amp A35 R65.BMP
-
Filters/BW/Amp A50 R50.BMP
-
Filters/BW/EQ LP C15.BMP
-
Filters/BW/EQ LP C25.BMP
-
Filters/BW/EQ LP C40.BMP
-
Filters/BW/EQ LP C50.BMP
-
Filters/BW/EQ LP C60.BMP
-
Filters/BW/EQ LP C75.BMP
-
Filters/BW/EQ LP C85.BMP
-
Filters/BW/Fo Env BP Curve.BMP
-
Filters/BW/Fo Env BP Linear.BMP
-
Filters/BW/Fo Env LP Left.BMP
-
Filters/BW/Fo Env LP Out1.BMP
-
Filters/BW/Fo Env LP Out2.BMP
-
Filters/BW/Fo Env LP mid.BMP
-
Filters/BW/Fo Env Radial Center.BMP
-
Filters/BW/Fo Env Radial Low.BMP
-
Filters/BW/Stripes 1Band.bmp
-
Filters/BW/Stripes 2Bands horiz.bmp
-
Filters/BW/Stripes 2Bands vert.bmp
-
Filters/BW/Stripes diagonal fine.bmp
-
Filters/BW/Stripes diagonal.bmp
-
Filters/BW/Stripes fine horiz.bmp
-
Filters/BW/Stripes fine vert.bmp
-
Filters/BW/Stripes tremol1 horiz.bmp
-
Filters/BW/Stripes tremol1 vert.bmp
-
Filters/BW/Stripes tremol2 horiz.bmp
-
Filters/BW/Stripes tremol2 vert.bmp
-
Filters/BW/Stripes tremol3 horiz.bmp
-
Filters/BW/Stripes tremol3 vert.bmp
-
Filters/BW/Stripes tremol4 horiz.bmp
-
Filters/BW/Stripes tremol4 vert.bmp
-
Filters/Colour/HPan G-R.BMP
-
Filters/Colour/HPan G-Y-R.BMP
-
Filters/Colour/HPan G-Y.BMP
-
Filters/Colour/HPan R-G.BMP
-
Filters/Colour/HPan R-Y-G.BMP
-
Filters/Colour/HPan R-Y.BMP
-
Filters/Colour/HPan V G-R.bmp
-
Filters/Colour/HPan Y-G.BMP
-
Filters/Colour/HPan-Bl-Y-W.bmp
-
Filters/Colour/HPan-Y-Vi.bmp
-
Filters/Colour/RYG horiz fine.bmp
-
Filters/Colour/RYG horiz.bmp
-
Filters/Colour/RYG vert fine.bmp
-
Filters/Colour/RYG vert.bmp
-
Filters/Colour/VPan BG-BR.BMP
-
Filters/Colour/VPan BG-Pu-BY.BMP
-
Filters/Colour/VPan BR-Y.BMP
-
Filters/Colour/VPan G-BG.BMP
-
Filters/Colour/VPan G-R.BMP
-
Filters/Colour/VPan G-Y-R.BMP
-
Filters/Colour/VPan G-Y.BMP
-
Filters/Colour/VPan Ma-B-Cy.BMP
-
Filters/Colour/VPan R-Y.bmp
-
Filters/Colour/VPan Y-R.BMP
-
Filters/Misc/BW AmpNoise 1.bmp
-
Filters/Misc/BW AmpNoise 2.bmp
-
Filters/Misc/BW AmpNoise 3.bmp
-
Filters/Misc/BW AmpNoise 4.bmp
-
Filters/Misc/BW Glassboxes03.bmp
-
Filters/Misc/BW Harmonica01.bmp
-
Filters/Misc/BW Harmonica03.bmp
-
Filters/Misc/BW Harmonica05.bmp
-
Filters/Misc/BW Pyramid.bmp
-
Filters/Misc/BW Radial Beams.bmp
-
Filters/Misc/BW Spot.bmp
-
Filters/Misc/BW darkspot03.bmp
-
Filters/Misc/BWave.bmp
-
Filters/Misc/Diamonds4.BMP
-
Filters/Misc/Diamonds5.BMP
-
Filters/Misc/Pan Asymmetric Horizontal Lines.BMP
-
Filters/Misc/Pan Horizontal Lines.BMP
-
Filters/Misc/Pan Noise White-Green.bmp
-
Filters/Misc/Pan Noise White-Red.bmp
-
Filters/Misc/Pan Waves.BMP
-
Filters/Misc/PanH-varihue1.bmp
-
Filters/Misc/PanH-varihue2.bmp
-
Filters/Misc/PanV-G-Y-Cy.bmp
-
Filters/Misc/PanV-Or-G-Pu.BMP
-
Filters/Misc/PanV-R-Or-G.bmp
-
Filters/Misc/PanV-W-Rx2.bmp
-
Filters/Misc/PanV-varihue1.bmp
-
Filters/Misc/PanV-varihue2.bmp
-
Filters/Misc/PanV-varihue3.bmp
-
Filters/Misc/PoisonCloud01.bmp
-
Filters/Misc/RYG Triangle.bmp
-
Filters/Misc/RYG Twirl0.bmp
-
Filters/Misc/TheBridge.bmp
-
Install.txt