Behavioral task
behavioral1
Sample
738ebcc8dc1c866c9f50ab70ab6e62e2921fc363c668b603209fd7ff1df732b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
738ebcc8dc1c866c9f50ab70ab6e62e2921fc363c668b603209fd7ff1df732b9.exe
Resource
win10v2004-20220812-en
General
-
Target
738ebcc8dc1c866c9f50ab70ab6e62e2921fc363c668b603209fd7ff1df732b9
-
Size
312KB
-
MD5
5d16457bf807d7f150b06308223c1732
-
SHA1
506346b69a24bd5cffaee557a1c79d5ed7b71e79
-
SHA256
738ebcc8dc1c866c9f50ab70ab6e62e2921fc363c668b603209fd7ff1df732b9
-
SHA512
cf15112890ab97ccf14f9fefeb4cc1d18a0240e04cf6915b184c5f981a68ec72aab9072acf96b7a783438a31686de8ca4147309b74693306bb21c3e6e458e5cb
-
SSDEEP
6144:I+1VyBSl40pPPMHLdL1hALe+2NirdrQdZVwUKD0Ey:IEym4wPMdoLT2NKc/wC
Malware Config
Signatures
-
Cobaltstrike family
Files
-
738ebcc8dc1c866c9f50ab70ab6e62e2921fc363c668b603209fd7ff1df732b9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE