Behavioral task
behavioral1
Sample
df9bb00f51f464c7e8b6a9c0603c44d099f4ec8112973be25e6137010416f63a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df9bb00f51f464c7e8b6a9c0603c44d099f4ec8112973be25e6137010416f63a.exe
Resource
win10v2004-20221111-en
General
-
Target
df9bb00f51f464c7e8b6a9c0603c44d099f4ec8112973be25e6137010416f63a
-
Size
307KB
-
MD5
131c0d733cab5949f531b08820c2a480
-
SHA1
63bbe529bd84f4581cf4ac15d1e68ac2b4827557
-
SHA256
df9bb00f51f464c7e8b6a9c0603c44d099f4ec8112973be25e6137010416f63a
-
SHA512
f2f518b7d695314f5cdcaecfe781af96647a93f51ba174286e948170ffe4e2fa4f37c374f1134431f11f42a6bdb500ebd38eaab95223747a597fb5995a32cc31
-
SSDEEP
6144:HkSz8T72Y0SLzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOnPECYeixlYGicb:HkqA7SSiYsY1UMqMZJYSN7wbstOn8fvp
Malware Config
Signatures
-
Cobaltstrike family
Files
-
df9bb00f51f464c7e8b6a9c0603c44d099f4ec8112973be25e6137010416f63a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE