cobaltstrike | c6a35f1fb9cadc941397dc6be61d8e99b0b0cd58ae37e9ebc2183d16e55f85fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6a35f1fb9cadc941397dc6be61d8e99b0b0cd58ae37e9ebc2183d16e55f85fd
Size

143KB
MD5

f59b4b37e1ed855de79e49ceb30130e6
SHA1

624a0555c3eb4d5318e57048f4865f3583be89d3
SHA256

c6a35f1fb9cadc941397dc6be61d8e99b0b0cd58ae37e9ebc2183d16e55f85fd
SHA512

37f3c845757e54ed2e6f51b6f9e8184241ff7cc46565f4de010017ee1ad836770cd0e3ee8e58ef115e7df3109718009d61e99028258d10864b88fb22d1f57216
SSDEEP

3072:XjlKZelTDui//FZZOecJ9n4glBbRVW1iE4paJz68LsiA:Jweln/FPOL/5Hb86aY

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

c6a35f1fb9cadc941397dc6be61d8e99b0b0cd58ae37e9ebc2183d16e55f85fd
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE