Suspicious
Suspect

f04d95f3a8bb4fbdf202d31a73d4727c

Share on LinkedIn
Print
PE Executable
MD5: f04d95f3a8bb4fbdf202d31a73d4727c
Size: 606.21 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
606.21 KB · 606,208 B
First seen
2026-10-20 13:46 · 4 days ago
Last seen
2026-10-20 13:46 · 4 days ago
Last analysis
2026-10-20 13:46 · 4 days ago
Hashes
MD5 f04d95f3a8bb4fbdf202d31a73d4727c Sha1 a3716e20ab932f433bd115ebce784f2cfc259bd5 Sha256 de8e4550241c82dd8addc993db679e5eb9ec3080dfc74eaeaf0fbba20aefd73e Sha384 6e6815e761954992428df49bda316076c49261c5c23aa847a261f39a99a894839cd84f6440e6039b5d69a850c1d146fd Sha512 95bef7a78c4c14bfaf54db96bf683f25273b5baea4b7243bd1877a8d9c2b78c2b696f4464f08ba5e6ad141118dbbe0dc9fe02cd1c3f54204b61617f455ac8518 SSDeep 12288:AH0y2yfwcX00alfYcZCRkbMIHLxKiCCdYWk7qX1EoR3HM9kQHrHgQ5ua:gQyfwNflDCUMIHLxphdYFu6GQHrA2 TLSH 7ED4F15433A8EA11D1FB5BB505B1E334537A6D8EA932E30A8DDA7CDF3826F045E08653
Detection
Symbol obfuscation
Medium
18 files
EXEf04d95f3a8bb4fbdf202d31a73d4727c
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
COOL.exe
Full Name
COOL.exe
EntryPoint
System.Void SteamLaundry.Program::Main()
Scope Name
COOL.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
COOL
Assembly Version
201.502.607.709
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Info
PE Detect: PeReader OK (file layout)
Total Strings
374
Main Method
System.Void SteamLaundry.Program::Main()
Main IL Instruction Count
11
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
ldnull <null>
newobj System.Void SteamLaundry.LaundryForm::.ctor(SteamLaundry.BethSubayaMakhzatha)
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙