Behavioral task
behavioral1
Sample
775ed528b1a8bee77e2657f3b2294defbe4e1f725c6ccbdce92b24650459dd98.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
775ed528b1a8bee77e2657f3b2294defbe4e1f725c6ccbdce92b24650459dd98.exe
Resource
win10v2004-20220812-en
General
-
Target
775ed528b1a8bee77e2657f3b2294defbe4e1f725c6ccbdce92b24650459dd98
-
Size
307KB
-
MD5
80e873dd3e7eabebc6e1df44d6aaa4a7
-
SHA1
020ca554c982c882d825168f0f5cd9cf681a6c2e
-
SHA256
775ed528b1a8bee77e2657f3b2294defbe4e1f725c6ccbdce92b24650459dd98
-
SHA512
33adf2200232b989082f4e91e65d49af85b86e14c598ca258e177a6d20ba690959b8fad49135a3a5fbf0d3195b52e55e3791144d78d9c54f317be767c50658f8
-
SSDEEP
6144:2qzUT72Y0SezinYKTY1SQshfRPVQe1MZkIYSccr7wbstOoPECYeixlYGicgP:2CI7SSJYsY1UMqMZJYSN7wbstOo8fvel
Malware Config
Signatures
-
Cobaltstrike family
Files
-
775ed528b1a8bee77e2657f3b2294defbe4e1f725c6ccbdce92b24650459dd98.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE