cobaltstrike | 9685abde322a9297f69c94e24d44c9d3dcc6b1a51800a64bb61190e55f862df4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9685abde322a9297f69c94e24d44c9d3dcc6b1a51800a64bb61190e55f862df4
Size

141KB
MD5

312b06dbe40c85e205e10decb055adbc
SHA1

b79533df9d67d463928326fff3dced0e9cb7dbda
SHA256

9685abde322a9297f69c94e24d44c9d3dcc6b1a51800a64bb61190e55f862df4
SHA512

80e11f3c6e24099e5b048ba6036b332b95dd440dc2a7b7d63429a855bebebc8f649249451cc9e5a33b802c584b3e6b81dbbe48ccb540aa099b4192f8ada91ed9
SSDEEP

3072:ZVWiwV7YXuucTz5muZy0z27Uu4K9kbE1cYyIdpaJpWnGVn:zWiwVcV85moy0z2g2GbsJaX

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

9685abde322a9297f69c94e24d44c9d3dcc6b1a51800a64bb61190e55f862df4
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE