cobaltstrike | 788612aab694fdcfc1fddf3da14b9fa1a2ff630f6f7c5faa67bc4a49ab19140b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788612aab694fdcfc1fddf3da14b9fa1a2ff630f6f7c5faa67bc4a49ab19140b
Size

307KB
MD5

ef8d96e256e8635f16ee27ba42fd0b2e
SHA1

ad6b06dae512d2dc6ceb461b9fdfa6784d2e3333
SHA256

788612aab694fdcfc1fddf3da14b9fa1a2ff630f6f7c5faa67bc4a49ab19140b
SHA512

e94777399c46d3ef73ca6a42711d456da374c8028668872f94835d5d2b092b4e2a896f9b64267c844c4a03834656f10f9085e5ede5e44f37084f29dcd7a651a2
SSDEEP

6144:2qzJT72Y0SXzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOWQPECYeixlYGicfM:2CV7SSuYsY1UMqMZJYSN7wbstOWQ8fvi

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

788612aab694fdcfc1fddf3da14b9fa1a2ff630f6f7c5faa67bc4a49ab19140b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE