cobaltstrike | 1764-56-0x0000000000120000-0x0000000000125000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1764-56-0x0000000000120000-0x0000000000125000-memory.dmp
Size

20KB
MD5

dfe840eb28c6163b8503755b88a0d3ac
SHA1

747fa51c84a3b38dd95f51d8a0333ab5420dbb06
SHA256

9988ed14c2e1766c3d752547dfd4e9a74980e35983ca346e24b05f1172d88356
SHA512

6167b9b03f174607080e0648d3861342b62d2bb096809f884b3a4f9400fa2cd7c65c511c89b2f3f4a033d84ac600ec3acaf3698cbb0a1e7cb5aa3eb8909e7456
SSDEEP

96:ac+lwu2Q2CbVgwRCvKrDHjF/2/4e6Lmc6/A9LaY0l2222nLnTWph17:aclu2NCbNZDHjF/a/A9Lab9T4

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

1764-56-0x0000000000120000-0x0000000000125000-memory.dmp
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ