Behavioral task
behavioral1
Sample
cad9eb5a91c9e7ba6582ca727173c48a77ae60939c8bfa875d6bc03bcce86e49.exe
Resource
win7-20220901-en
General
-
Target
cad9eb5a91c9e7ba6582ca727173c48a77ae60939c8bfa875d6bc03bcce86e49
-
Size
144KB
-
MD5
715232b95f71fb77c170bf0ed526f250
-
SHA1
2fd4c3f4c6988b4364a2d7f60b84ce182338ef29
-
SHA256
cad9eb5a91c9e7ba6582ca727173c48a77ae60939c8bfa875d6bc03bcce86e49
-
SHA512
c1be358f0e6720e85f38421acf1ef66b258b24daa07e5a2fde71204552136f043c314bd1be654d61120fd32916112f0eb7e92ecf18397a1105db8cd7d9152951
-
SSDEEP
3072:s0IYwk7xA1Ifra36ZbYNgLV3XJBbKuMHiJgpaJDK0rvox2qUQs:nIYwkdra3UbYuFPbUJavrEs
Malware Config
Signatures
-
Cobaltstrike family
Files
-
cad9eb5a91c9e7ba6582ca727173c48a77ae60939c8bfa875d6bc03bcce86e49.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE