f04d95f3a8bb4fbdf202d31a73d4727c

PE Executable

MD5: f04d95f3a8bb4fbdf202d31a73d4727c

Size: 606.21 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

606.21 KB · 606,208 B

Hashes

MD5 f04d95f3a8bb4fbdf202d31a73d4727c Sha1 a3716e20ab932f433bd115ebce784f2cfc259bd5 Sha256 de8e4550241c82dd8addc993db679e5eb9ec3080dfc74eaeaf0fbba20aefd73e Sha384 6e6815e761954992428df49bda316076c49261c5c23aa847a261f39a99a894839cd84f6440e6039b5d69a850c1d146fd Sha512 95bef7a78c4c14bfaf54db96bf683f25273b5baea4b7243bd1877a8d9c2b78c2b696f4464f08ba5e6ad141118dbbe0dc9fe02cd1c3f54204b61617f455ac8518 SSDeep 12288:AH0y2yfwcX00alfYcZCRkbMIHLxKiCCdYWk7qX1EoR3HM9kQHrHgQ5ua:gQyfwNflDCUMIHLxphdYFu6GQHrA2 TLSH 7ED4F15433A8EA11D1FB5BB505B1E334537A6D8EA932E30A8DDA7CDF3826F045E08653

Detection

Symbol obfuscation

Medium

18 files

EXEf04d95f3a8bb4fbdf202d31a73d4727c

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINRT_MANIFEST

BINID:0001

BINID:0

BIN.Net Resources

BINSteamLaundry.Properties.Resources.resources

BINAction_Close_32x32

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

BINAdd_32x32

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

BINEdit_32x32

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

BINIDGl

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

BINOPlus

DATA[NBF]root.Data

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	COOL.exe
Full Name	COOL.exe
EntryPoint	System.Void SteamLaundry.Program::Main()
Scope Name	COOL.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	COOL
Assembly Version	201.502.607.709
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Info	PE Detect: PeReader OK (file layout)
Total Strings	374
Main Method	System.Void SteamLaundry.Program::Main()
Main IL Instruction Count	11
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> ldnull <null> newobj System.Void SteamLaundry.LaundryForm::.ctor(SteamLaundry.BethSubayaMakhzatha) call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

18 files

EXEf04d95f3a8bb4fbdf202d31a73d4727c

Structure

BINResources

BIN.Net Resources

No malware configuration was found at this point.

You must be signed in to view YARA rules.