Behavioral task
behavioral1
Sample
775f718dea79d7ce66e9604442b931ba34624c02c3bb56d9564886499856a319.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
775f718dea79d7ce66e9604442b931ba34624c02c3bb56d9564886499856a319.exe
Resource
win10v2004-20220901-en
General
-
Target
775f718dea79d7ce66e9604442b931ba34624c02c3bb56d9564886499856a319
-
Size
315KB
-
MD5
e67522f4393a12c6926d9e0bbd82ec29
-
SHA1
9a7b8b323ba1c7d5f6c3c3ca2b55e3ea725e1d1d
-
SHA256
775f718dea79d7ce66e9604442b931ba34624c02c3bb56d9564886499856a319
-
SHA512
a5504d029672cca81c4ba8566ba5f80974db3c765f4eba161a7221ea25e65ceb6be12b1da2b818d4e566b92a92198e4e196df882146bf35b063cf9af215e9444
-
SSDEEP
6144:Hq3gCcxoqWYHtSwYnI+tnYDcMbY4FmNzNwm+MhUanxO1BcC1cui:Hq3Kz1NanI+1Kb5KzNVNYPcnv
Malware Config
Signatures
-
Cobaltstrike family
Files
-
775f718dea79d7ce66e9604442b931ba34624c02c3bb56d9564886499856a319.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE