cobaltstrike | 293514524e40cfc3502ee2220c2a1c5cc88acba717f40bc8bfe1dcf9d5305496 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

293514524e40cfc3502ee2220c2a1c5cc88acba717f40bc8bfe1dcf9d5305496
Size

147KB
MD5

63b0740a005dfde4922a4e3989dad369
SHA1

41113dea2b51234439f20a0e8f80365e5c001d12
SHA256

293514524e40cfc3502ee2220c2a1c5cc88acba717f40bc8bfe1dcf9d5305496
SHA512

6b0cffd5a8f214b73b4f59123a7b1752956e592882db1ffb00449203f8ff21fe1c49ddc242975204fdd066a130db94f6aa08379953b52a9ae329337c0309c7d7
SSDEEP

3072:bzxiBaeYkkiOK2HPFPwKZqhUV4+ODiqwUXZ5ZvOv/E:h6u7P3Zqz+WX7ZmU

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

293514524e40cfc3502ee2220c2a1c5cc88acba717f40bc8bfe1dcf9d5305496
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE