Behavioral task
behavioral1
Sample
be29edd1a9ec851cba0620b46a934211e96edc0d00008bb46b296d8dc8ea7d2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
be29edd1a9ec851cba0620b46a934211e96edc0d00008bb46b296d8dc8ea7d2b.exe
Resource
win10v2004-20220812-en
General
-
Target
be29edd1a9ec851cba0620b46a934211e96edc0d00008bb46b296d8dc8ea7d2b
-
Size
312KB
-
MD5
8994f0c6fb51940bca5dbbdaad6a8a2d
-
SHA1
5499b96409af5f619af42dc4e8daa7a6551bc240
-
SHA256
be29edd1a9ec851cba0620b46a934211e96edc0d00008bb46b296d8dc8ea7d2b
-
SHA512
d6b161f9fd27a2283267a26032fbbdd813270462bd2cc86ecd8889e6d16a8c757a0efe9095fbf54aef08f7be4f2f47fd3d3878886574152c293ec8b3745b1b44
-
SSDEEP
6144:I+1VyBRl40pPUMHLdL1hALe+2NirdrQdZiwUKD0cE:IEy94wUMdoLT2NKcww8
Malware Config
Signatures
-
Cobaltstrike family
Files
-
be29edd1a9ec851cba0620b46a934211e96edc0d00008bb46b296d8dc8ea7d2b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE