Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-05_66c7f4306163b55f8d53ea6ed15db434_cobalt-strike_cobaltstrike_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-05_66c7f4306163b55f8d53ea6ed15db434_cobalt-strike_cobaltstrike_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2023-09-05_66c7f4306163b55f8d53ea6ed15db434_cobalt-strike_cobaltstrike_JC.exe
-
Size
908KB
-
MD5
66c7f4306163b55f8d53ea6ed15db434
-
SHA1
694aa49e8e628932990e911ce21f1fae275572f4
-
SHA256
b9da7bb752b5c7bd82c90803bbc23d19285f0d1bdeee2f6e70a10eb480a72643
-
SHA512
01a9e9a733a23a733825cde87b898250d979e78b0858ee2b4ed69c1ee36859dc95ad5d272d57b27c724e9318ffecd0f7313cc511a4c5fe157f7304d2833db603
-
SSDEEP
3072:CyqGZh4Tb0MEjdBR7H3ZOOaxyahGwX4+3dAQBqmnc2r4NlODpRjtUFEE:TqGAbpEBa4pwX93CQw0ulODnj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-05_66c7f4306163b55f8d53ea6ed15db434_cobalt-strike_cobaltstrike_JC.exe
Files
-
NEAS.2023-09-05_66c7f4306163b55f8d53ea6ed15db434_cobalt-strike_cobaltstrike_JC.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 613B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.profile Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ