Behavioral task
behavioral1
Sample
c0d7f2b7e71725f3753d896710d23779a55dca061ae9330153dc1815e75b1a1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0d7f2b7e71725f3753d896710d23779a55dca061ae9330153dc1815e75b1a1f.exe
Resource
win10v2004-20221111-en
General
-
Target
c0d7f2b7e71725f3753d896710d23779a55dca061ae9330153dc1815e75b1a1f
-
Size
307KB
-
MD5
0675040b2a1f9852a2318a763bda2a20
-
SHA1
cbb2889367a0d30e3050ec40f8acf4e151071485
-
SHA256
c0d7f2b7e71725f3753d896710d23779a55dca061ae9330153dc1815e75b1a1f
-
SHA512
083363aed1bc6435c43d8d7212453fd5ede35ea4dc935e71d29b4ca816db57692fe431703ddf083a31313f465c4e037c35ef5c65ad86209387f4a5db2a0e897b
-
SSDEEP
6144:RGXzyT72Y0SOzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOEPECYeixlYGicz:RGDW7SSZYsY1UMqMZJYSN7wbstOE8fvt
Malware Config
Signatures
-
Cobaltstrike family
Files
-
c0d7f2b7e71725f3753d896710d23779a55dca061ae9330153dc1815e75b1a1f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE