cobaltstrike | afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba
Size

307KB
MD5

c3957a2ddcb861f29cb89dab90720d08
SHA1

6ba250273e538b72e789c71f9e78bfe9b3697ea3
SHA256

afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba
SHA512

801f9c95f479a01caa75c0f185996a7a9cf1c16c52e0e806d90b084a6c62d8a652a7a84e753b8a377c65e1046810aa286c64db7f1bfeb8e53a5d8797f9ab19a1
SSDEEP

6144:mTfzOT72Y0STzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO3PECYeixlYGic+:mTra7SS6YsY1UMqMZJYSN7wbstO38fv4

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

afd7efd00fad8d389817ff33e7ec97bf6cfe86ae42418f1e0451f68e444258ba
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE