Suspect
PE Executable
MD5: f04d95f3a8bb4fbdf202d31a73d4727c
Size: 606.21 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
606.21 KB · 606,208 B
First seen
2026-10-20 13:46 · 4 days ago
Last seen
2026-10-20 13:46 · 4 days ago
Last analysis
2026-10-20 13:46 · 4 days ago
Hashes
MD5
f04d95f3a8bb4fbdf202d31a73d4727c
Sha1
a3716e20ab932f433bd115ebce784f2cfc259bd5
Sha256
de8e4550241c82dd8addc993db679e5eb9ec3080dfc74eaeaf0fbba20aefd73e
Sha384
6e6815e761954992428df49bda316076c49261c5c23aa847a261f39a99a894839cd84f6440e6039b5d69a850c1d146fd
Sha512
95bef7a78c4c14bfaf54db96bf683f25273b5baea4b7243bd1877a8d9c2b78c2b696f4464f08ba5e6ad141118dbbe0dc9fe02cd1c3f54204b61617f455ac8518
SSDeep
12288:AH0y2yfwcX00alfYcZCRkbMIHLxKiCCdYWk7qX1EoR3HM9kQHrHgQ5ua:gQyfwNflDCUMIHLxphdYFu6GQHrA2
TLSH
7ED4F15433A8EA11D1FB5BB505B1E334537A6D8EA932E30A8DDA7CDF3826F045E08653
Detection
Symbol obfuscation
Medium
18 files
EXEf04d95f3a8bb4fbdf202d31a73d4727c
Structure
BINResources
BIN.Net Resources
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Module Name | COOL.exe |
| Full Name | COOL.exe |
| EntryPoint | System.Void SteamLaundry.Program::Main() |
| Scope Name | COOL.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | COOL |
| Assembly Version | 201.502.607.709 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Info | PE Detect: PeReader OK (file layout) |
| Total Strings | 374 |
| Main Method | System.Void SteamLaundry.Program::Main() |
| Main IL Instruction Count | 11 |
| Main IL | |