ColossiumReleaseV1.1.0 (1).zip
- SHA256 c0544f2bd8ba21eeca352ec755d06cbfb9d39d84719d59ccd90df265a6223505
Static task
static1
1 signatures
General
- Target ColossiumReleaseV1.1.0 (1).zip
- Size 5.2MB
- Sample260714-dnbl2sc15m
- SHA256 c0544f2bd8ba21eeca352ec755d06cbfb9d39d84719d59ccd90df265a6223505
- MD5 5f122bde6c6dde44f12019fcbf03a89d
- SHA1 5771fc49b864b8a828be1bf2eaa836ec93f41468
- SHA512 687a30bf219479961d048d6677439e5f821613fb2891ac59631fe2ee594d47ab2366ec72d7882fd7012bca85b397ee57332e75ce43d399ab9a17563b49ba8807
- SSDEEP 98304:mukW7GzK3Ibvx6fja0Ej4ebsF6t5/jIZZXyocs/XMSqMIGibW:dkWCGdaNj685/jQEoth5yW
- TLSH T179463332C77F8B500DC4A2489191622EE06A4E17F7F9B8DFF5272DD7BD035836A41A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Colossium.exe
File Explorer
-
ColossiumReleaseV1.1.0 (1).zip.zip 5.2MB
-
Colossium.exe.exe 9.2MB
-
LICENSE.txt34KB
-
Plugin_Link.txt118B
-
config.ini60B
Colossium.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 312e1c7a1b8d1e77f1aed5788c4d4501416810fd2b340326f65f5ba3f0d8f92b
- MD5 6581d6d09750a16b2c7e819f727aad8d
- SHA1 5d522752b8ccef63ced0e1462dad5d2d9249143b
- SHA512 56b66e828ead7ecf3885cefd8e3f0030abeaae3b865e05f5e183f7a86ce8e402caa150663cdb9cb4233dcfef78b71436c40890bdbbcb93c8a8017c41e4d6b467
- SSDEEP 98304:G8yj0fbUmZ1ZxJ9ElpqeBbnLILRPy3sKffmE/wGnWU7LWJE:G8yyUY1ZxIJbnLGQ3Tx/wuz7L
- TLSH T106A68C43ECA545E9C0AAA235C5A79253BA717C480B3167D73B60F3383F76BD0AA79704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
476512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
262KB
Virtual Size
573KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
518KB
Virtual Size
517KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
103B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
662KB
Virtual Size
661KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
460KB
Virtual Size
460KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
LICENSE.txt
- SHA256 605e9047a563c5c8396ffb18232aa4304ec56586aee537c45064c6fb425e44ad
- MD5 db95b6e40dc7d26d8308b6b7375637b6
- SHA1 b4d7662bb6b0b804c8fc94f7bc81f59dce0c36f3
- SHA512 6dbfcd77cdf7d1b8bede7d6c7b2d61943033da1bdd675a419af2f183798f7ece774fa9ae0b189d92200065704be2ba11fa0966e3f1d6edf9ffbb1b61cf60c73e
- SSDEEP 768:1o1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:1hcycsrfrnoum
- TLSH T134F2945FB74413B2018206A26A9F68DEE31DD03A736640A57859C15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
Plugin_Link.txt
- SHA256 2e31acce20f05f197f7b070e6d2a49bbc8c75db1209d5f808b9d60294e1c17da
- MD5 0c99dd70d360a78829cc3ffea45422ed
- SHA1 ecb30acb7ff977c26501d4cc5dff907bc4a45a5b
- SHA512 adbc228db4db23ead79ebba05c167d1fd6cb40b30ce2199e198c22032b96dd660e78f10e4e9f5ee4fcc9727847a5a4a11a6c9b0ecc93eb7b81ae4ba979f56c5d
- TLSH T155B0927A67C48C21E96A6B96F098C4A9A26686BD0482C1C4FA62E11DE130543673A86B
- MD5 SHA1 SHA512 TLSH
config.ini
- SHA256 7aec02ca0240204e40795eaac79d564d513874ede6eeb7fe5441f9dc9dbdc395
- MD5 5d263a4c08e4b1444cff5cf0026df7d9
- SHA1 d8be84d636af1920904877f53799879e53e838c8
- SHA512 a7c08f817ebf96516ef12353dbc303b8a75a5e515c14ebf454cc2780abdb0f86d36939c59de8636f61404aa4097752aa66ad9d59b6e89de496273581391d149e
- TLSH T195A0024860DCB84A9198C2209A4016155407DD021C8E700C559438FB2056B131DCF253
- MD5 SHA1 SHA512 TLSH