Behavioral task
behavioral1
Sample
cf799e2653967d10af88cb348e0b15acfe642002980b76b3740abec7d0f1a3aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf799e2653967d10af88cb348e0b15acfe642002980b76b3740abec7d0f1a3aa.exe
Resource
win10v2004-20220901-en
General
-
Target
cf799e2653967d10af88cb348e0b15acfe642002980b76b3740abec7d0f1a3aa
-
Size
307KB
-
MD5
4d53cdb522a85911f08935285bd710cb
-
SHA1
197fa11e5641f902cc5a7e5e005c63ceddd26084
-
SHA256
cf799e2653967d10af88cb348e0b15acfe642002980b76b3740abec7d0f1a3aa
-
SHA512
44f6413de907370f510da78e4521cc3048f2ca468b3875e500179e95251c74672bd394e49f80660811276231a4c28e39f5e9c016c3f20aa49d5acb0097a46a18
-
SSDEEP
6144:2qzUT72Y0SdzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOlPECYeixlYGiccj:2CI7SSUYsY1UMqMZJYSN7wbstOl8fve1
Malware Config
Signatures
-
Cobaltstrike family
Files
-
cf799e2653967d10af88cb348e0b15acfe642002980b76b3740abec7d0f1a3aa.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE