Behavioral task
behavioral1
Sample
56dcc38036e2db473d7917e07c0d71758db3992121c22f65ddae3360bd64e788.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56dcc38036e2db473d7917e07c0d71758db3992121c22f65ddae3360bd64e788.dll
Resource
win10v2004-20220812-en
General
-
Target
56dcc38036e2db473d7917e07c0d71758db3992121c22f65ddae3360bd64e788
-
Size
205KB
-
MD5
faf951a8c91ae0c1b4863c191752889d
-
SHA1
da2a16d399432b1b53b2c540cd9ebbde491454d7
-
SHA256
56dcc38036e2db473d7917e07c0d71758db3992121c22f65ddae3360bd64e788
-
SHA512
5fd66b5a15cd3ebd60783fc9bfb5e53c43ff77f3e27df2a26ac54b2aaf647864e8d91e801e6d891681f1ccc3c009460262159edfeffbacbb548b185333de155a
-
SSDEEP
3072:y/QPFX1eqEfuBNSYuiM8CNj8hFsoMX0ghsJRgCD3iFHjdU2x5+L:y/MEfuN0t8C5oFsoeRM3oHjA
Malware Config
Signatures
-
Cobaltstrike family
Files
-
56dcc38036e2db473d7917e07c0d71758db3992121c22f65ddae3360bd64e788.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ