cobaltstrike | 80a5c266045042f1ac213c29d911b80d0766a6c32b555c660137e2d716019998 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80a5c266045042f1ac213c29d911b80d0766a6c32b555c660137e2d716019998
Size

305KB
MD5

b34dbc61ebefcdab9143cdfc830a74f5
SHA1

c4652a9a6dc56d51c725ed14e6fcad036ae671aa
SHA256

80a5c266045042f1ac213c29d911b80d0766a6c32b555c660137e2d716019998
SHA512

78c75eb9c5c53daabe5b0160ceff98f237417941ed764ab4148ba50f65cb08393291bfb1fd1810218a1c874415983324562b641087f256a054b7bb08c1c27ab6
SSDEEP

6144:5GSzRT72Y0SEzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO2PECYeixlYGicI1:5Gqt7SSXYsY1UMqMZJYSN7wbstO28fvQ

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

80a5c266045042f1ac213c29d911b80d0766a6c32b555c660137e2d716019998
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE