CobaltLoader[.]exe

Resubmissions

24/10/2026, 17:30

261024-v3jpmscz9j

24/10/2026, 17:30

261024-v3arqsfd633

Sharing

Copy URL Twitter E-mail

General

Target
CobaltLoader.exe
Size 930KB
Sample261024-v3arqsfd63
SHA256 d91d1dc36a8c43cc71946e05521011cf22f63195c15efc47871ddf4d153bad6a
MD5 b4b076075bf39252df292e5e394ca47a
SHA1 3b27402d1dd68d4e603a54864023408a14392a43
SHA512 8172e352aa7a148ce1dadcfc683aee870a98ee10a76244c2edabf8b9b75172d3491ef1c98748ce84f916bf195e13b19dea69184c0217d6d185b73394feebed35
SSDEEP 24576:si2pMfmfQstjNIlFdVdU3DGvjWiCcm3fptapiAnYUF:si2pcyQstKa3DGvjWiCB3htZAnNF
TLSH
T1D7159E4DB1B501FDE13AF435A866B50BF63278890B608ADB23E506591FB37E04EB7712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CobaltLoader.exe

File Explorer

CobaltLoader.exe

.exe 930KB

CobaltLoader.exe

IMPHASH 1d0ad374405760c306c0e8ea80f33714
SHA256 d91d1dc36a8c43cc71946e05521011cf22f63195c15efc47871ddf4d153bad6a
MD5 b4b076075bf39252df292e5e394ca47a
SHA1 3b27402d1dd68d4e603a54864023408a14392a43
SHA512 8172e352aa7a148ce1dadcfc683aee870a98ee10a76244c2edabf8b9b75172d3491ef1c98748ce84f916bf195e13b19dea69184c0217d6d185b73394feebed35
SSDEEP 24576:si2pMfmfQstjNIlFdVdU3DGvjWiCcm3fptapiAnYUF:si2pcyQstKa3DGvjWiCB3htZAnNF
TLSH
T1D7159E4DB1B501FDE13AF435A866B50BF63278890B608ADB23E506591FB37E04EB7712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

524216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmSetWindowAttribute

ole32

CoInitializeEx CoCreateInstance CoUninitialize

shlwapi

PathRemoveFileSpecW

user32

ScreenToClient ClientToScreen SetCursor SetCursorPos GetClientRect ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture SetProcessDPIAware GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard MonitorFromPoint SystemParametersInfoW LoadIconW LoadCursorW GetCursorPos SetCapture GetWindowRect SetWindowRgn UpdateWindow GetAsyncKeyState IsIconic SetWindowDisplayAffinity SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PostMessageW PeekMessageW DispatchMessageW TranslateMessage MessageBoxW

gdi32

CreateRoundRectRgn GetDeviceCaps

advapi32

GetUserNameW

kernel32

GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc GetFileSizeEx SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW WriteConsoleW GetCommandLineW GetTimeZoneInformation GetFileType HeapAlloc HeapFree GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetLastError RtlUnwindEx RaiseException RtlPcToFileHeader GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetEnvironmentVariableW InitializeSListHead SetStdHandle HeapSize SetEndOfFile GetDateFormatW GetTimeFormatW GetLocaleInfoA CloseHandle CreateProcessW CreateFileW GetFileAttributesW GetFileSize GetVolumeInformationW ReadFile WriteFile Sleep GetWindowsDirectoryW GetModuleFileNameW GetComputerNameW MultiByteToWideChar WideCharToMultiByte GlobalAlloc GlobalUnlock GlobalLock GlobalFree VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime

shell32

ShellExecuteW

imm32

ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext