2024-07-05_8ba20649c107279870fcccae03a87ad8_avoslocker_cobalt-strike | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-05_8ba20649c107279870fcccae03a87ad8_avoslocker_cobalt-strike
Size

485KB
MD5

8ba20649c107279870fcccae03a87ad8
SHA1

9ef9edae8845b44aa2bbbd9ccd789c3d2e4d4c6a
SHA256

a438746217777b94079d115e0babe84e38d42731c2ef54ed933405cfa5b0cf40
SHA512

9316a4b0b1db845e5c291ca0ef63796c4a52129cb46d45bce122f138e166013bfd70c94bb1c4ae1b36bb410c7de35d2e0842617c899d0653a1445df6b41090b2
SSDEEP

6144:C7WQ0j4ltziolIGlnE2dFD9rlBu0R+J5JlLgPYfq8ZF02IlLZDs0nXe:qi4lZiox9fu0R+J5JlLgPbDs0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-05_8ba20649c107279870fcccae03a87ad8_avoslocker_cobalt-strike

Files

2024-07-05_8ba20649c107279870fcccae03a87ad8_avoslocker_cobalt-strike
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ