cobaltstrike | 87d0ebea784c6ae444ce33face6898227292ecaea3d4273221d42f67fd61f447 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87d0ebea784c6ae444ce33face6898227292ecaea3d4273221d42f67fd61f447
Size

307KB
MD5

c6342a762eb806474a70c147f38b40bd
SHA1

534f9f7f1fe587d2742e8b3d48f97e1acdee567e
SHA256

87d0ebea784c6ae444ce33face6898227292ecaea3d4273221d42f67fd61f447
SHA512

7df21a5b236bc077aa137c12034fdffa452a95cb5ff0d683a4a102744d14963a9cb643418ee40e160ccce423f171997b3f365b64028f475becffb89cdd06899b
SSDEEP

6144:RGXzET72Y0SazinYKTY1SQshfRPVQe1MZkIYSccr7wbstOUPECYeixlYGic7:RGDY7SSVYsY1UMqMZJYSN7wbstOU8fvl

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

87d0ebea784c6ae444ce33face6898227292ecaea3d4273221d42f67fd61f447
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE