Behavioral task
behavioral1
Sample
68e9d231bb23d517045c09ccbeea4bd424e0e150188969f72a624f50ffe2dea8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68e9d231bb23d517045c09ccbeea4bd424e0e150188969f72a624f50ffe2dea8.exe
Resource
win10v2004-20220812-en
General
-
Target
68e9d231bb23d517045c09ccbeea4bd424e0e150188969f72a624f50ffe2dea8
-
Size
114KB
-
MD5
6f1250729306470b8b2afa86892663a7
-
SHA1
83d9f0b3c668a7a92f0ac86e1935df15eae311a7
-
SHA256
68e9d231bb23d517045c09ccbeea4bd424e0e150188969f72a624f50ffe2dea8
-
SHA512
3a0c6086874475b38e11805aab1c300a6e98e33014259f5397ff6585675e406658e52e77991b82aea863b1114bf0eedb5233a2e7ffd6bb86d2d87e7129171341
-
SSDEEP
3072:/XAtWYKBlVXnGseFwyb5Mwlg66moVqxOsd2gW9:fAoYKXVXL8wyb2E1Osd2g
Malware Config
Signatures
-
Cobaltstrike family
Files
-
68e9d231bb23d517045c09ccbeea4bd424e0e150188969f72a624f50ffe2dea8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE