cobaltstrike | 2504a93cb52427a447487d763b5bfeb8c02cd9a6c830760416f0a7d858be9ac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2504a93cb52427a447487d763b5bfeb8c02cd9a6c830760416f0a7d858be9ac9
Size

307KB
MD5

ebece49bfec6d6e2a28f04d222c032ff
SHA1

b689643a1997b0114f14c3d787c00f9e4c38413b
SHA256

2504a93cb52427a447487d763b5bfeb8c02cd9a6c830760416f0a7d858be9ac9
SHA512

6bfc4020b773b6b31bdf5f0ac4d0f3ac7558592d6b127689fd6230960393bb944e57f50dc953f1442612bd7fdb0b8498ef760636f00412543591f3a203f50468
SSDEEP

6144:HkSzJT72Y0SUzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO2PECYeixlYGic/:HkqV7SSHYsY1UMqMZJYSN7wbstO28fvF

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

2504a93cb52427a447487d763b5bfeb8c02cd9a6c830760416f0a7d858be9ac9
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE