Behavioral task
behavioral1
Sample
affe8c1a8fb87dfb8500ffa0e69262a88eb2fd9632f01276c16f5038bf326329.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
affe8c1a8fb87dfb8500ffa0e69262a88eb2fd9632f01276c16f5038bf326329.exe
Resource
win10v2004-20221111-en
General
-
Target
affe8c1a8fb87dfb8500ffa0e69262a88eb2fd9632f01276c16f5038bf326329
-
Size
312KB
-
MD5
afe5710285ce157eca219dddd24f2c24
-
SHA1
78cbab36a2a0b4b55b40758b1dec794cdfb332b7
-
SHA256
affe8c1a8fb87dfb8500ffa0e69262a88eb2fd9632f01276c16f5038bf326329
-
SHA512
863a2ce35bea3cd8640d9d24bc0cf63d9e6726ad8482f504eaf1a3b797cb8a0e3f077786e3102d3259717f0cefdd3c9b5c78bd190fe84a4e6dbfa3d8a9401850
-
SSDEEP
6144:I+1VyBvdl40pPzMHLdL1hALe+2NirdrQdZpwUKD0+W:IEyl4wzMdoLT2NKc7wQ
Malware Config
Signatures
-
Cobaltstrike family
Files
-
affe8c1a8fb87dfb8500ffa0e69262a88eb2fd9632f01276c16f5038bf326329.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE