cobaltstrike | b2bb79d8681f38842eea4a8d670ca09c02472565135459aedf0ac6cc71b8f6e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2bb79d8681f38842eea4a8d670ca09c02472565135459aedf0ac6cc71b8f6e5
Size

305KB
MD5

5e0e64a2a61bcbe87ba6e7e5082110ad
SHA1

e982b3753872ca9e582fc01a2d4c8b88eb1e4439
SHA256

b2bb79d8681f38842eea4a8d670ca09c02472565135459aedf0ac6cc71b8f6e5
SHA512

aec0eff94db0fd55de64b2c6d86275e0ee9379ab0fa34a446bebfbbb72e791441543ac5f940910fed5de09fac04bc084ee2d7230623fe3127906471bf8e892f4
SSDEEP

6144:5GSzTT72Y0SqzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOEPECYeixlYGick:5GqX7SSFYsY1UMqMZJYSN7wbstOE8fvO

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

b2bb79d8681f38842eea4a8d670ca09c02472565135459aedf0ac6cc71b8f6e5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE