Behavioral task
behavioral1
Sample
c32d58abd4b833d0dc806c4c153e7dfaaab36682951c2fc8344606c30d214097.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c32d58abd4b833d0dc806c4c153e7dfaaab36682951c2fc8344606c30d214097.exe
Resource
win10v2004-20220812-en
General
-
Target
c32d58abd4b833d0dc806c4c153e7dfaaab36682951c2fc8344606c30d214097
-
Size
307KB
-
MD5
cc261f402ab3a8c03752b108b82f2c27
-
SHA1
47954b570f9f2fe2e2a4a9496d02fc78555e2d9c
-
SHA256
c32d58abd4b833d0dc806c4c153e7dfaaab36682951c2fc8344606c30d214097
-
SHA512
9e9b3eb9ca724bf5e640221401b329fef393d0f1bc62ac3d9433aa21ef5511ce9b9364d765997242c28b4cf15cf080b8e0498aebdb146884bf5b9231e6157b79
-
SSDEEP
6144:HkSzAT72Y0SUzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOmPECYeixlYGicw:Hkqs7SSHYsY1UMqMZJYSN7wbstOm8fve
Malware Config
Signatures
-
Cobaltstrike family
Files
-
c32d58abd4b833d0dc806c4c153e7dfaaab36682951c2fc8344606c30d214097.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE