cobaltstrike | b4df463468f0cf0e9b80f971646c2edf749ab7ea7f77b6662d9ba140aa36e578 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4df463468f0cf0e9b80f971646c2edf749ab7ea7f77b6662d9ba140aa36e578
Size

307KB
MD5

a5f6399c5062e41d8e8e60e24e01a3dd
SHA1

7a48c037ce211aaaeaa594f499de48361630cdb3
SHA256

b4df463468f0cf0e9b80f971646c2edf749ab7ea7f77b6662d9ba140aa36e578
SHA512

826e5a1d91521dc11008349dde1a96fab8c8ef3053106a99b062f93447e19eef2597e866ca355e88a62a2127b7b2fbc8241c8928a67591b89502e6f89094edcd
SSDEEP

6144:K0vzyT72Y0SRzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOZPECYeixlYGicP:K0bW7SSIYsY1UMqMZJYSN7wbstOZ8fv1

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

b4df463468f0cf0e9b80f971646c2edf749ab7ea7f77b6662d9ba140aa36e578
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE