cobaltstrike | 84a5e17252c50ba05991f62c4e3214b3d30348c1f9cbaf3d45bad12bd0d5f808 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84a5e17252c50ba05991f62c4e3214b3d30348c1f9cbaf3d45bad12bd0d5f808
Size

114KB
MD5

cd4235d5277a337f4b1d6a0f584f25d9
SHA1

c9db0b48ed6a9bc66930cce1028eba66d2cb0203
SHA256

84a5e17252c50ba05991f62c4e3214b3d30348c1f9cbaf3d45bad12bd0d5f808
SHA512

65dcaad91153179d3c882e5abb77e2084a8f932bd8414c82597b8e981820f357c5fdc99bd3e1fddc11da3cadc245c3da2398a94df8a4c50b81d26e910fb03b55
SSDEEP

3072:/XAtWYKBlVgaGCNDpILTKAO6moNOyDN3UYz9:fAoYKXVgAJpIk4h

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

84a5e17252c50ba05991f62c4e3214b3d30348c1f9cbaf3d45bad12bd0d5f808
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE