Behavioral task
behavioral1
Sample
a296041bdb1794a1799443ec266afa94254ec3bfb7a546fccfe1fa2e0ef0363f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a296041bdb1794a1799443ec266afa94254ec3bfb7a546fccfe1fa2e0ef0363f.exe
Resource
win10v2004-20221111-en
General
-
Target
a296041bdb1794a1799443ec266afa94254ec3bfb7a546fccfe1fa2e0ef0363f
-
Size
305KB
-
MD5
36f89a5310277e5eb05840beee34ba29
-
SHA1
08aaed65c1d7f20fc5b0b0ebbbe6daf880ce9588
-
SHA256
a296041bdb1794a1799443ec266afa94254ec3bfb7a546fccfe1fa2e0ef0363f
-
SHA512
f3f6a857f49f4d13b983e519b155386cb2096a83d690d09ddcc786c55bd4813d022c541a74eb65a78affed5dc5a75bfcbd6457b9382feb533cd70b9c2712f37b
-
SSDEEP
6144:5GSzvT72Y0S+zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOYPECYeixlYGic4:5Gqr7SSpYsY1UMqMZJYSN7wbstOY8fv6
Malware Config
Signatures
-
Cobaltstrike family
Files
-
a296041bdb1794a1799443ec266afa94254ec3bfb7a546fccfe1fa2e0ef0363f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE