Behavioral task
behavioral1
Sample
437c010938b9261b72972d4d834ca7321064cc7a26c02060f2c3e1bc017bb9f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
437c010938b9261b72972d4d834ca7321064cc7a26c02060f2c3e1bc017bb9f7.exe
Resource
win10v2004-20220812-en
General
-
Target
437c010938b9261b72972d4d834ca7321064cc7a26c02060f2c3e1bc017bb9f7
-
Size
152KB
-
MD5
73eafa96a82b95a8a936dbd8f5b0d8be
-
SHA1
1a4f441be78a244f211fea373412ec08068fc661
-
SHA256
437c010938b9261b72972d4d834ca7321064cc7a26c02060f2c3e1bc017bb9f7
-
SHA512
46cada38ae0374753bfe74e5b275b764344daef22849b4dfb34d20b27d8c0cf10900ef81786ef46288cd0107c0e69d55a2a30ec8625e7d27189e4eee46b39f2a
-
SSDEEP
3072:vsM+xYtQhCIcDO4ZTGv1RRy93nRd93eFTzZeSWijRN3CtGJ:ZRMCPO4ZTUAVVCzQdi9N3C
Malware Config
Signatures
-
Cobaltstrike family
Files
-
437c010938b9261b72972d4d834ca7321064cc7a26c02060f2c3e1bc017bb9f7.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE