Behavioral task
behavioral1
Sample
a68242d22925acc952c9b32bf7fe87ee782e592985dee1dcdbcfd6dbe7859928.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a68242d22925acc952c9b32bf7fe87ee782e592985dee1dcdbcfd6dbe7859928.exe
Resource
win10v2004-20221111-en
General
-
Target
a68242d22925acc952c9b32bf7fe87ee782e592985dee1dcdbcfd6dbe7859928
-
Size
312KB
-
MD5
eeae2ca96761b0df98c83a7eae0c2ee9
-
SHA1
dd38b41dbd472d27c46b7e2c48afd211e3a59ce6
-
SHA256
a68242d22925acc952c9b32bf7fe87ee782e592985dee1dcdbcfd6dbe7859928
-
SHA512
3528f9c67a22e8b2ac9b11dc2598d5299f2a66adc5a55cffad4d1bc87dd919eab9cf2064035090ef1f2d24e9f3353d8f4ea5b8270d508e35e70bce32c2e93a9b
-
SSDEEP
6144:I+1VyBRl40pPGMHLdL1hALe+2NirdrQdZUwUKD0Ek:IEy94wGMdoLT2NKcCw8
Malware Config
Signatures
-
Cobaltstrike family
Files
-
a68242d22925acc952c9b32bf7fe87ee782e592985dee1dcdbcfd6dbe7859928.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE