Static task
static1
Behavioral task
behavioral1
Sample
cool.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cool.exe
Resource
win10v2004-20240802-en
General
-
Target
cool.exe
-
Size
27KB
-
MD5
1ee7cc05d97af21a41db79474906ba91
-
SHA1
9a6434526b3d4766d044da5753de220be164eca1
-
SHA256
1838d564a975fa0c341a4849b8ee1770be6ed48e8d1a0c2a0d8a4e67cc8f567f
-
SHA512
cff758f21406bcbdd1b6a7a749462a751a511e373ef61b978bb5d1ebcd46612f3e53c33de014d473ee623b5445ba03a695252ce354f3fd02f93a9ac996387fea
-
SSDEEP
384:dNqGSj1dStBzyUt5Ldxhw+LGlMz/T/oO7Waqf+BvvE9q+cNB0zS0i5RT44:WGSjeIs++L2MIO78+Bk94zM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cool.exe
Files
-
cool.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ