cobaltstrike | b43efaf957d5b1b41d0790035b6eb1f6c6b616cc55c855ad081d8af48f712ef8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b43efaf957d5b1b41d0790035b6eb1f6c6b616cc55c855ad081d8af48f712ef8
Size

315KB
MD5

e26bfaae78293e950ab8a3a70a0aab47
SHA1

b19a6a175c48fed415763076c32b28db26694974
SHA256

b43efaf957d5b1b41d0790035b6eb1f6c6b616cc55c855ad081d8af48f712ef8
SHA512

d903f76b765b1e6b1db0b1e5ae8c6bed90911289769693c286fd06da6a180474cd0ec7564c2af29434dcf3826363a11fd916e51aa5dc3b216cb201eaad2ec038
SSDEEP

6144:Hq3gCF1oqWYHtSBYnI+tnYDcMbY4FmNzNwm+MhUaoxO1BcC1cx:Hq35z1N1nI+1Kb5KzNVN1Pcnx

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

b43efaf957d5b1b41d0790035b6eb1f6c6b616cc55c855ad081d8af48f712ef8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE