Behavioral task
behavioral1
Sample
b454d38095c759da1ab2f89b5fe17955c53b5ae02dccad8852cc035f35c42b77.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b454d38095c759da1ab2f89b5fe17955c53b5ae02dccad8852cc035f35c42b77.exe
Resource
win10v2004-20221111-en
General
-
Target
b454d38095c759da1ab2f89b5fe17955c53b5ae02dccad8852cc035f35c42b77
-
Size
312KB
-
MD5
918b36ccf7ad9279a730de0605c1090f
-
SHA1
9279497f46447f186c829e44f6e806b2a83058a1
-
SHA256
b454d38095c759da1ab2f89b5fe17955c53b5ae02dccad8852cc035f35c42b77
-
SHA512
2c71f4e74e67d435069ebf543d2230b02e4103ecbe4d0f588793f0d14d1a94db344db49853f60d67e6e2ef8f8d9354dbbd5654cb3eb0da65c13130e6760f852e
-
SSDEEP
6144:xWI+jNXUeLFTiCRTy7wzFzRODpyUOr2//m2TnLo0Dzs:EIQU2iCvxzKy1rc/msa
Malware Config
Signatures
-
Cobaltstrike family
Files
-
b454d38095c759da1ab2f89b5fe17955c53b5ae02dccad8852cc035f35c42b77.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE