Behavioral task
behavioral1
Sample
6ea4fe3a83f1f48873bb07c52f837a766d42b6d27d4db2a7dd08798a21bd2738.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ea4fe3a83f1f48873bb07c52f837a766d42b6d27d4db2a7dd08798a21bd2738.exe
Resource
win10v2004-20220812-en
General
-
Target
6ea4fe3a83f1f48873bb07c52f837a766d42b6d27d4db2a7dd08798a21bd2738
-
Size
113KB
-
MD5
7790d0c73e72404d5aefb37be44f2af9
-
SHA1
26de358806852f608d20419c938fb1ad61ae761c
-
SHA256
6ea4fe3a83f1f48873bb07c52f837a766d42b6d27d4db2a7dd08798a21bd2738
-
SHA512
5055b46b21ce455006c0412201f5aaba1eb184a1a90ac0970cfbe42bedb0499d6400519f087a3f3f554610809c4a9ef596a33c535112a958974e0cd10b161315
-
SSDEEP
3072:kTY7VKne/pGXIvDbKfn4YO6P6morL3Atm3TJ7:sgVH/NbbKfTHtm3TJ7
Malware Config
Signatures
-
Cobaltstrike family
Files
-
6ea4fe3a83f1f48873bb07c52f837a766d42b6d27d4db2a7dd08798a21bd2738.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE