ColorBug[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ColorBug.zip
Size 29KB
Sample260930-gbdgnafg95
SHA256 6422f5468473875d3b241c0a68090c83f3d6e398fb53b83853bc95ece0c3de31
MD5 63d481cf935eaffe34075d51835279a9
SHA1 58c385c806fe7ed10436f141e960b0536adc65ff
SHA512 089da992860b39c68649edb478b51952fd0cb7e3e30883d107cfe294ff27384f6143879e2f86d5222bf70ade9401e29c3aaaec67d8645e862f56d8a06447645c
SSDEEP 768:ed2WDJY2g2+p9mBztC4U3++O3VNDarUfFmw:edj+KC4k++ZrUfFmw
TLSH
T14CD2E11C27C459FE5C591A2A70E3DC86C865E22B58921D6FF5229EC954CA3CB810EF47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ColorBug.exe

File Explorer

ColorBug.zip

.zip 29KB
ColorBug.exe

.exe 53KB

ColorBug.zip

SHA256 6422f5468473875d3b241c0a68090c83f3d6e398fb53b83853bc95ece0c3de31
MD5 63d481cf935eaffe34075d51835279a9
SHA1 58c385c806fe7ed10436f141e960b0536adc65ff
SHA512 089da992860b39c68649edb478b51952fd0cb7e3e30883d107cfe294ff27384f6143879e2f86d5222bf70ade9401e29c3aaaec67d8645e862f56d8a06447645c
SSDEEP 768:ed2WDJY2g2+p9mBztC4U3++O3VNDarUfFmw:edj+KC4k++ZrUfFmw
TLSH
T14CD2E11C27C459FE5C591A2A70E3DC86C865E22B58921D6FF5229EC954CA3CB810EF47
MD5 SHA1 SHA512 SSDEEP TLSH

ColorBug.exe

SHA256 775ba68597507cf3c24663f5016d257446abeb66627f20f8f832c0860cad84de
MD5 6536b10e5a713803d034c607d2de19e3
SHA1 a6000c05f565a36d2250bdab2ce78f505ca624b7
SHA512 61727cf0b150aad6965b4f118f33fd43600fb23dde5f0a3e780cc9998dfcc038b7542bfae9043ce28fb08d613c2a91ff9166f28a2a449d0e3253adc2cb110018
SSDEEP 1536:ynqAKryDLrASOcRw52sjzIUK7RkYrJ2lrKX:SNdMT8Z8cX
TLSH
T117333B63F2D08471E173DEBC9C3A8214992BFE312D34944A7BB52E8D0E793949C1A797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ColorBug.zip

ColorBug.exe

generic