Behavioral task
behavioral1
Sample
a8615395509dccd6a63fea9b0b5b4fc1ca2aca974aad2efb33e97842ec81325a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a8615395509dccd6a63fea9b0b5b4fc1ca2aca974aad2efb33e97842ec81325a.exe
Resource
win10v2004-20221111-en
General
-
Target
a8615395509dccd6a63fea9b0b5b4fc1ca2aca974aad2efb33e97842ec81325a
-
Size
144KB
-
MD5
88d99ccb10be95f1299939b940a37ba8
-
SHA1
44fdee095c4aaa45424d668aa05e409122969226
-
SHA256
a8615395509dccd6a63fea9b0b5b4fc1ca2aca974aad2efb33e97842ec81325a
-
SHA512
5978bc76dc4bb33f2004ca215959c44a266b21efe9414ca0e5fa94701e6d2f5a6d08e8a9a9e749a616dd092501827704b1700dc3729a973fff9dabc7123b01a5
-
SSDEEP
3072:s0IYwk7xA1G2PDVlZ2ilhdh+ukIRObZzFpdXpaJx7vHUgrQs:nIYwkdQDVL2irv+UYbHZaz7MwQs
Malware Config
Signatures
-
Cobaltstrike family
Files
-
a8615395509dccd6a63fea9b0b5b4fc1ca2aca974aad2efb33e97842ec81325a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE