Behavioral task
behavioral1
Sample
84b8ec774af868afca3ae6f52f193f2a684590f6b0252c53ed26d260ea5787f3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
84b8ec774af868afca3ae6f52f193f2a684590f6b0252c53ed26d260ea5787f3.exe
Resource
win10v2004-20220812-en
General
-
Target
84b8ec774af868afca3ae6f52f193f2a684590f6b0252c53ed26d260ea5787f3
-
Size
315KB
-
MD5
fa4bd34faf28ddf2fdadeb487f8ab0e0
-
SHA1
565108630a199ff39fa911d6c2812ddb77be6249
-
SHA256
84b8ec774af868afca3ae6f52f193f2a684590f6b0252c53ed26d260ea5787f3
-
SHA512
38d944e720c553bec68bd30a453bbd0511c544d58a25a01b6f8ac2bfeb0cff0475733daec633dfc99b04cb21c1cc8a56694dab0fb433020a7bcf67bd3bb7f260
-
SSDEEP
6144:Hq3gCJGoqWYHtSXYnI+tnYDcMbY4FmNzNwm+MhUaixO1BcC1c9:Hq3yz1NznI+1Kb5KzNVNTPcn9
Malware Config
Signatures
-
Cobaltstrike family
Files
-
84b8ec774af868afca3ae6f52f193f2a684590f6b0252c53ed26d260ea5787f3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE