cobaltstrike | 742ca02759ca349760d49c7b9408d4b978c26f62ca13643503ebc2f766e5b2b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742ca02759ca349760d49c7b9408d4b978c26f62ca13643503ebc2f766e5b2b1
Size

312KB
MD5

84b1dcf13507437e5dea8e3f5cb78061
SHA1

d6d76bd3bcf95b6274967fef1dd045eea8345e1e
SHA256

742ca02759ca349760d49c7b9408d4b978c26f62ca13643503ebc2f766e5b2b1
SHA512

ec2f9d9c7cc885f5ea5b64d2c85ae82630ebe650cde28f2d4362938e91f147fe787cd85c32616c6dfa27f6872aaba46408d15f9155596439f4595f11eed61ecf
SSDEEP

6144:I+1VyBSl40pPPMHLdL1hALe+2NirdrQdZVwUKD0Eg:IEym4wPMdoLT2NKc/ww

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

742ca02759ca349760d49c7b9408d4b978c26f62ca13643503ebc2f766e5b2b1
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE