HackTool[.]Win32[.]CobaltStrike[.]pz-b7db4f1078a147596cecdc62ca553b78989db99ad9376e805c9965eb31fcd0adN

Sharing

Copy URL Twitter E-mail

General

Target

HackTool.Win32.CobaltStrike.pz-b7db4f1078a147596cecdc62ca553b78989db99ad9376e805c9965eb31fcd0adN
Size

1.1MB
MD5

73f609d514243c9e7ba25c229e41aa10
SHA1

0a8bb23543061ecc52e5a0ff35f993c06808532f
SHA256

b7db4f1078a147596cecdc62ca553b78989db99ad9376e805c9965eb31fcd0ad
SHA512

24fd804a56a3e62dec41de86e0cdfd872dcaf3235d92bda593cdc59161c761d90fcad063e6e11c3f55688e301d6ededb198ec663c95ef07c0ca79a566abbbade
SSDEEP

12288:wqBF6oVTk26GXLNaGUnFsnEV+43Ykj7MwunhiFDemTZnNV0XJvMr+DCH5nDOMoXc:vBF6727XL1+Ki+4ini/T9UDhCcbEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HackTool.Win32.CobaltStrike.pz-b7db4f1078a147596cecdc62ca553b78989db99ad9376e805c9965eb31fcd0adN

Files

HackTool.Win32.CobaltStrike.pz-b7db4f1078a147596cecdc62ca553b78989db99ad9376e805c9965eb31fcd0adN
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 278B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/18
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/30
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/43
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/59
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/75
Size: 512B - Virtual size: 32B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/109
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.data Size: 192KB - Virtual size: 281KB

/4 Size: 512B - Virtual size: 278B

/18 Size: 183KB - Virtual size: 183KB

/30 Size: 148KB - Virtual size: 147KB

/43 Size: 76KB - Virtual size: 76KB

/59 Size: 123KB - Virtual size: 123KB

/75 Size: 512B - Virtual size: 32B

/90 Size: 512B - Virtual size: 34B

/109 Size: 749KB - Virtual size: 748KB

.idata Size: 1024B - Virtual size: 882B

.symtab Size: 317KB - Virtual size: 316KB

.rsrc Size: 95KB - Virtual size: 94KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 192KB - Virtual size: 281KB

/4
Size: 512B - Virtual size: 278B

/18
Size: 183KB - Virtual size: 183KB

/30
Size: 148KB - Virtual size: 147KB

/43
Size: 76KB - Virtual size: 76KB

/59
Size: 123KB - Virtual size: 123KB

/75
Size: 512B - Virtual size: 32B

/90
Size: 512B - Virtual size: 34B

/109
Size: 749KB - Virtual size: 748KB

.idata
Size: 1024B - Virtual size: 882B

.symtab
Size: 317KB - Virtual size: 316KB

.rsrc
Size: 95KB - Virtual size: 94KB