Static task
static1
Behavioral task
behavioral1
Sample
coolthing.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
coolthing.exe
Resource
win10v2004-20241007-en
General
-
Target
coolthing.exe
-
Size
3.6MB
-
MD5
90bb1f0ee481f641f15ea7d7e7555b87
-
SHA1
e320deca18212a01404df6d39b5dad30cd5063d8
-
SHA256
593706d1795317c22c1386c1bdc44d5298cbaf9ac140aa83152919feb560ff1e
-
SHA512
812ef2bea5982f4262ac34e6747e8ce55bee715cda869bc949ccf192dee3f03de97d86c59a053a49ccda19091c820d95ea9f67712974f6066458fdd4e7825d39
-
SSDEEP
98304:ukqXf0FlL9nrYAWAZi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:ukSIlLtzWAXAkuujCPX9YG9he5GnQCAo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource coolthing.exe
Files
-
coolthing.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ