Behavioral task
behavioral1
Sample
794ff495e4754c70b71182011fefffc67c8bc25694f46d3912444127d1870155.exe
Resource
win7-20220901-en
General
-
Target
794ff495e4754c70b71182011fefffc67c8bc25694f46d3912444127d1870155
-
Size
143KB
-
MD5
e5394b52e97873cac4c9df8cc543ef57
-
SHA1
424dc323639f1fd6ba798f6f16dbe46261b9c041
-
SHA256
794ff495e4754c70b71182011fefffc67c8bc25694f46d3912444127d1870155
-
SHA512
ef4c77ca4f7235d0e28d9fbe8b5101f89ff76fef7b11e757ebc46ec45e25f3e7c0991b92be528b6ac592f8a583e4652549c8c9c44089a8fbc795478943777020
-
SSDEEP
3072:XjlKZelTDxfra36ZbYNgLV3XJBbKuMHiJOpaJtK0rvox2qUQ:Jwelxa3UbYuFPbUPatrE
Malware Config
Signatures
-
Cobaltstrike family
Files
-
794ff495e4754c70b71182011fefffc67c8bc25694f46d3912444127d1870155.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE