cobaltstrike | ac3317233ee294a33fb5b929be0a936e34b68b1db253fdce3a71ba2d478054ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac3317233ee294a33fb5b929be0a936e34b68b1db253fdce3a71ba2d478054ea
Size

307KB
MD5

b825ae08c4b00a90c4eccaddcbdf89df
SHA1

c11c62a37e168bbc06f5d50594ce966f402ba69a
SHA256

ac3317233ee294a33fb5b929be0a936e34b68b1db253fdce3a71ba2d478054ea
SHA512

dca163b8453959baaa3a0982b08aed33a9831eeb9c9e603f87e08cb93e608a5721ba52141d30f1edac0b410cddf93c578bc88e45e7e1edf45b9ca5a29b415733
SSDEEP

6144:HkSz7T72Y0SyzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOlmPECYeixlYGicH:Hkqv7SS9YsY1UMqMZJYSN7wbstO48fvV

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

ac3317233ee294a33fb5b929be0a936e34b68b1db253fdce3a71ba2d478054ea
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE