cobaltstrike | 0f3298d9cf279d30db828e2013dcaf7534aac2b1259c181fd93f72814d2eb523 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f3298d9cf279d30db828e2013dcaf7534aac2b1259c181fd93f72814d2eb523
Size

312KB
MD5

43f2eb76c882e3d0cd47738ffc84b150
SHA1

71470cc916e62a110b2a756762b8d602a5824cf2
SHA256

0f3298d9cf279d30db828e2013dcaf7534aac2b1259c181fd93f72814d2eb523
SHA512

f4f589ebaa1cccdfc0a089fa4404cbf4bec7365349ba9fed89209ef39071e573d2244e8a8f0703db8dbe0049da5f7d306ae514371f4a330159baf75f9200c828
SSDEEP

6144:xWI+jNXUe3FT8CRTy7wzFzRODpyUOr2//c2TnLo0D8P:EIQUS8CvxzKy1rc/cs8

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

0f3298d9cf279d30db828e2013dcaf7534aac2b1259c181fd93f72814d2eb523
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE