cobaltstrike | 6149ae3503b3feb52d574770aa32605362614c97969f6688a73a1df088d8c33f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6149ae3503b3feb52d574770aa32605362614c97969f6688a73a1df088d8c33f
Size

212KB
MD5

5d41f993dc78238d529fec39ee5ee430
SHA1

9c942be3cc4d09052c2c038c42375f589be4f1b0
SHA256

6149ae3503b3feb52d574770aa32605362614c97969f6688a73a1df088d8c33f
SHA512

810cdda8352951101f606fa0c67d7b32a8b0d5ebc10552bbb78f137f1df0a079af3a22b089c362bccbf242c0ff2b93cc47fad9d46870e6a40062c79b6569f10d
SSDEEP

6144:MbzmT72Y0SvzinYKTY1SQshfRPVQe1MZkIYSccr7g:M/C7SS2YsY1UMqMZJYSN7g

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

6149ae3503b3feb52d574770aa32605362614c97969f6688a73a1df088d8c33f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE