cobaltstrike | a538029024f7a7d0dbee28dd132ee7bc50a089471a8c62991107ab2f1b1c4909 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a538029024f7a7d0dbee28dd132ee7bc50a089471a8c62991107ab2f1b1c4909
Size

315KB
MD5

f272637d67257f2283dc2b5bfc2830e9
SHA1

09aa68eb005e85fb8ca7cf7ae6ae3508100fe9a2
SHA256

a538029024f7a7d0dbee28dd132ee7bc50a089471a8c62991107ab2f1b1c4909
SHA512

8489a3281713bff99900d2f839dbb81ea4bf956972f454dc8aa736de4aaf4fb89b6318b76069c9afb3a57704da1a0e858c70a41ee8478a7b231d585e33a19a3a
SSDEEP

6144:Hq3gCKtoqWYHtSyYnI+tnYDcMbY4FmNzNwm+MhUaJxO1BcC1cH:Hq3Ez1NInI+1Kb5KzNVNmPcnH

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

a538029024f7a7d0dbee28dd132ee7bc50a089471a8c62991107ab2f1b1c4909
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE