Behavioral task
behavioral1
Sample
bd6823f32ea62599678b488c9a5f6ae3eee7fdddbde079c6bfd4bdfb7fef1a93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd6823f32ea62599678b488c9a5f6ae3eee7fdddbde079c6bfd4bdfb7fef1a93.exe
Resource
win10v2004-20220812-en
General
-
Target
bd6823f32ea62599678b488c9a5f6ae3eee7fdddbde079c6bfd4bdfb7fef1a93
-
Size
307KB
-
MD5
b2e69f7e80051accbeff310543481d3f
-
SHA1
dd72e56fac6e7330ceb642c31927a68e824160e1
-
SHA256
bd6823f32ea62599678b488c9a5f6ae3eee7fdddbde079c6bfd4bdfb7fef1a93
-
SHA512
5f921b3c5a963f7c740ed21ffd9c614339bb77c39970378c6b1486c761c17753b50a46edb75ebe68fcf6007c0fdca67851da668ae58a997ab06b1509fd6b17cf
-
SSDEEP
6144:K0vzhT72Y0S3zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOjPECYeixlYGicn:K0bd7SSOYsY1UMqMZJYSN7wbstOj8fv1
Malware Config
Signatures
-
Cobaltstrike family
Files
-
bd6823f32ea62599678b488c9a5f6ae3eee7fdddbde079c6bfd4bdfb7fef1a93.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE