Colossium[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Colossium.exe
Size 9.2MB
Sample260804-zh7m7axyet
SHA256 312e1c7a1b8d1e77f1aed5788c4d4501416810fd2b340326f65f5ba3f0d8f92b
MD5 6581d6d09750a16b2c7e819f727aad8d
SHA1 5d522752b8ccef63ced0e1462dad5d2d9249143b
SHA512 56b66e828ead7ecf3885cefd8e3f0030abeaae3b865e05f5e183f7a86ce8e402caa150663cdb9cb4233dcfef78b71436c40890bdbbcb93c8a8017c41e4d6b467
SSDEEP 98304:G8yj0fbUmZ1ZxJ9ElpqeBbnLILRPy3sKffmE/wGnWU7LWJE:G8yyUY1ZxIJbnLGQ3Tx/wuz7L
TLSH
T106A68C43ECA545E9C0AAA235C5A79253BA717C480B3167D73B60F3383F76BD0AA79704
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Colossium.exe

File Explorer

Colossium.exe

.exe 9.2MB

Colossium.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 312e1c7a1b8d1e77f1aed5788c4d4501416810fd2b340326f65f5ba3f0d8f92b
MD5 6581d6d09750a16b2c7e819f727aad8d
SHA1 5d522752b8ccef63ced0e1462dad5d2d9249143b
SHA512 56b66e828ead7ecf3885cefd8e3f0030abeaae3b865e05f5e183f7a86ce8e402caa150663cdb9cb4233dcfef78b71436c40890bdbbcb93c8a8017c41e4d6b467
SSDEEP 98304:G8yj0fbUmZ1ZxJ9ElpqeBbnLILRPy3sKffmE/wGnWU7LWJE:G8yyUY1ZxIJbnLGQ3Tx/wuz7L
TLSH
T106A68C43ECA545E9C0AAA235C5A79253BA717C480B3167D73B60F3383F76BD0AA79704
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

476512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

262KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

518KB

Virtual Size

517KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

109KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

103B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

662KB

Virtual Size

661KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

460KB

Virtual Size

460KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Colossium.exe

kernel32

generic