General

  • Target
    z43ISFFORMHBLDRAFTTHBL53164US7272Coscoline.exe
  • Size 632KB
  • Sample240509-smwcdsbc92
  • SHA256 21773cea42a57dff11a05f01ea94f48fc457871b110a410e4ccb416a4e346229
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • z43ISFFORMHBLDRAFTTHBL53164US7272Coscoline.exe
    .exe 632KB
  • Civics/Diskretionen.tel
    1KB
  • Civics/Grsgroet.int
    1KB
  • Civics/Jing.asm
    1KB
  • Civics/Mullahism.cir
    3KB
  • Forvelsernes217/printertilslutningernes.nos
    2KB
  • Forvelsernes217/printmenus.dam
    2KB
  • Forvelsernes217/radilogiskes.ind
    2KB
  • Forvelsernes217/resharpens.sup
    2KB
  • Forvelsernes217/ressourcegrnsers.psy
    1KB
  • Forvelsernes217/restoplagenes.maa
    1KB
  • Forvelsernes217/satire.bam
    1KB
  • Forvelsernes217/sniggled.fas
    2KB
  • Forvelsernes217/speedly.knt
    3KB
  • Forvelsernes217/timelanges.buc
    3KB
  • Forvelsernes217/venireman.prp
    1KB
  • Forvelsernes217/wafered.tet
    2KB
  • Learnedness/Nonadapter.bel
    2KB
  • Learnedness/Snren.hin
    2KB
  • Learnedness/Strategien122.ded
    3KB
  • Learnedness/autorotational.his
    2KB
  • Learnedness/baandmaskines.una
    2KB
  • Learnedness/begynderkurserne.vre
    3KB
  • Learnedness/biscanism.kra
    2KB
  • Learnedness/blank.eks
    3KB
  • Learnedness/bolstedet.int
    3KB
  • Learnedness/boretaarnes.unc
    2KB
  • Learnedness/cervid.ove
    1KB
  • Learnedness/cleronomy.enc
    3KB
  • Learnedness/diagnosen.tri
    3KB
  • Learnedness/fiberen.son
    1KB
  • Learnedness/forknyt.sir
    3KB
  • Learnedness/forsnvringers.rin
    1KB
  • Learnedness/fowling.txt
    406B
  • Learnedness/geogenous.tos
    1KB
  • Learnedness/grandmotherliness.uds
    1KB
  • Learnedness/grannybush.sel
    3KB
  • Learnedness/heptylene.nat
    1KB
  • Learnedness/isbjrnene.eft
    1KB
  • Learnedness/kaffekoppens.ufo
    1KB
  • Learnedness/lemfldigst.spa
    2KB
  • Learnedness/monumental.han
    3KB
  • Learnedness/oscilloscopically.bru
    2KB
  • Learnedness/personbefordringers.bul
    3KB
  • Learnedness/photoactive.dim
    3KB
  • Learnedness/pikestaff.sca
    3KB
  • Learnedness/plaintiffship.she
    3KB
  • Learnedness/polyzoic.lou
    3KB
  • Pseudoaconitine210/Lavishment/Asway.ove
    3KB
  • Pseudoaconitine210/Lavishment/Ballvens247.ins
    1KB
  • Pseudoaconitine210/Lavishment/Bedoyo.ano
    1KB
  • Pseudoaconitine210/Lavishment/Bifilar.For
    49KB
  • Pseudoaconitine210/Lavishment/Diakoner.ene
    3KB
  • Pseudoaconitine210/Lysbehandlinger.Tra
    331KB

z43ISFFORMHBLDRAFTTHBL53164US7272Coscoline.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 21773cea42a57dff11a05f01ea94f48fc457871b110a410e4ccb416a4e346229
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13171
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths