Behavioral task
behavioral1
Sample
74d1f9882507990253f50a1ee0a9f783a56262333731ec8dee3f55e4e968a23b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74d1f9882507990253f50a1ee0a9f783a56262333731ec8dee3f55e4e968a23b.exe
Resource
win10v2004-20221111-en
General
-
Target
74d1f9882507990253f50a1ee0a9f783a56262333731ec8dee3f55e4e968a23b
-
Size
307KB
-
MD5
400666c6de3e04bcdc6970e649731992
-
SHA1
b55f237f4d823d22a3e23b0d4f20778647f7d73a
-
SHA256
74d1f9882507990253f50a1ee0a9f783a56262333731ec8dee3f55e4e968a23b
-
SHA512
4ecdcc3cb74aa13933738fdd188def1364d662ec9482c869edf745a419299a03b1408c7575bab0fd78cfff59af0e987c4c88cdda6764e357473741adde3d9284
-
SSDEEP
6144:bqzyT72Y0SE2UzinYKTY1SQshfRPVQe1MZkIYSccr7wbstO8PECYeixlYGicxx:bCW7SSEQYsY1UMqMZJYSN7wbstO88fv9
Malware Config
Signatures
-
Cobaltstrike family
Files
-
74d1f9882507990253f50a1ee0a9f783a56262333731ec8dee3f55e4e968a23b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE