cobaltstrike | 7af6686aa042cbbcc08a54f6ea68acf89170ba167131a41d447740ee90d50c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7af6686aa042cbbcc08a54f6ea68acf89170ba167131a41d447740ee90d50c65
Size

141KB
MD5

b3e2494221e8d2a8a80f1f6d7c359d7e
SHA1

1d2835aac50e489e76366d6aa93803f74d40138d
SHA256

7af6686aa042cbbcc08a54f6ea68acf89170ba167131a41d447740ee90d50c65
SHA512

f42a77fcb4f10f8f407da7c0bf6d1665d305ee0f6265de74668e0a0a80c9028b20528ad3faa85f26fd21477cf8bc5a27d23d29ad86b2fb9e2669bbc8f95ead78
SSDEEP

3072:ZVWiwV7YXuuOuP1VFdZW2cp5bsup9TbZVdnppSpaJ8DqpHo:zWiwVcVT7FDW2uPHbbtGaqWpHo

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

7af6686aa042cbbcc08a54f6ea68acf89170ba167131a41d447740ee90d50c65
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE