Behavioral task
behavioral1
Sample
92530b87947a97a2ac8f5431467369ba1427a448708fdc9f7e15afb61fd796e4.exe
Resource
win7-20220901-en
General
-
Target
92530b87947a97a2ac8f5431467369ba1427a448708fdc9f7e15afb61fd796e4
-
Size
144KB
-
MD5
e6b72ed2d3eeb2253f8bc0fce84b7183
-
SHA1
00c128accb19f52e36d21ced61309a602e55b471
-
SHA256
92530b87947a97a2ac8f5431467369ba1427a448708fdc9f7e15afb61fd796e4
-
SHA512
d8efd5bae815cb83f9d6de5339a635794260da5f8be03251ceb6be2cc463e4cf9285cd40e14186ef63089f6397f328d30e15c3034f176d652c37705277f4a826
-
SSDEEP
3072:oDZaZeFbifra36ZbYNgLV3XJBbKuMHiJgpaJIK0rvox2qUQ:wgeYa3UbYuFPbUJaYrE
Malware Config
Signatures
-
Cobaltstrike family
Files
-
92530b87947a97a2ac8f5431467369ba1427a448708fdc9f7e15afb61fd796e4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE