Static task
static1
Behavioral task
behavioral1
Sample
Cobaltbghdbghich19_browsingExe.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Cobaltbghdbghich19_browsingExe.exe
Resource
win10v2004-20230703-en
General
-
Target
Cobaltbghdbghich19_browsingExe.exe
-
Size
887KB
-
MD5
e3c4f7dce14de2a84a1c8bb7fbc94ea7
-
SHA1
2d4f748461914d59a69acae46bedb11c8899e546
-
SHA256
5090f311b37309767fb41fa9839d2770ab382326f38bab8c976b83ec727e6796
-
SHA512
1720806d5b23cdbc1c6142fb68e096eb0c66836c2825d1f667353306d5621f115554a60dc76ab2edf2896efef8ff48ec2eed01e3203d44e951cf588f8ac7c56e
-
SSDEEP
24576:qvNuXoELdB9boE2koZ7g/28DDghyhpRT4vyDLk9rMtNtj85:qvN2dB9MlX7K2yDghMrT4KDLQMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Cobaltbghdbghich19_browsingExe.exe
Files
-
Cobaltbghdbghich19_browsingExe.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 880KB - Virtual size: 879KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ