cobaltstrike | bf496ed7d097ab07755222582d831598707825671d38df924dad0d09cc937274 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf496ed7d097ab07755222582d831598707825671d38df924dad0d09cc937274
Size

307KB
MD5

fb12a08736c6f293135a70e226e2062a
SHA1

c5c4e2b0212e3b9b263351a1065ae54f59f1aaa3
SHA256

bf496ed7d097ab07755222582d831598707825671d38df924dad0d09cc937274
SHA512

a83c46ad8700b0869522b4c54caf19104b70a2f0c59d8a04ad9c455bfc6dd84f32d32ff4d005d6310a110423512d9cc9f9878bb471368544f0abfbecbd7b437b
SSDEEP

6144:bqz3ST72Y0SGzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOoPECYeixlYGic3BV:bC327SSBYsY1UMqMZJYSN7wbstOo8fvZ

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

bf496ed7d097ab07755222582d831598707825671d38df924dad0d09cc937274
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE