cobaltstrike | c383b6b49f8b02b178439333be06a8d780d74613a1fd5b09e3de08ebb3174173 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c383b6b49f8b02b178439333be06a8d780d74613a1fd5b09e3de08ebb3174173
Size

307KB
MD5

e23b51e5242195b0e1d367e69429446b
SHA1

1317a09ef2dee9ed77702d69c3fff6b3fcac33d5
SHA256

c383b6b49f8b02b178439333be06a8d780d74613a1fd5b09e3de08ebb3174173
SHA512

a37e8fc0fb5ec42c059ad85c668921c0476c1e32267cf66a1d89d68b38b0704668b2b947e3c68fa81b31b2077b342248d2fb3f58734bd958dcfa8024b6410ec5
SSDEEP

6144:bqzhT72Y0SezinYKTY1SQshfRPVQe1MZkIYSccr7wbstOkPECYeixlYGicpwAF:bCd7SSJYsY1UMqMZJYSN7wbstOk8fveC

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

c383b6b49f8b02b178439333be06a8d780d74613a1fd5b09e3de08ebb3174173
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE