C:\dvs\p4\build\sw\rel\gpu_drv\r575\r576_32\drivers\nvcamera\redist\_out\wddm2_amd64_release\FreqTransfer64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-05-19_205802ce966ce66d0ffab32968d29284_black-basta_cobalt-strike_satacom.exe
Resource
win10v2004-20250502-en
General
-
Target
2025-05-19_205802ce966ce66d0ffab32968d29284_black-basta_cobalt-strike_satacom
-
Size
3.9MB
-
MD5
205802ce966ce66d0ffab32968d29284
-
SHA1
a57d2f20c8f77e565ab050a4c7d6da1283030ff7
-
SHA256
9466db73a9b8cf747ea3d63bf67460e1e5414d718683cd636d39f40c391448ba
-
SHA512
6e2e0eb6fd19c0bc2d7715457fdf88008899a6bca1112231f1081d6e09c36a48fe8ca6a8d71e397044e981c61affecc0152f9b69e9cbd8d443e0c20d4f40e121
-
SSDEEP
49152:95KfQdTE6pY6WyCE4j+8B/c5KgGROaKt:+Qdw6u0jKgs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-05-19_205802ce966ce66d0ffab32968d29284_black-basta_cobalt-strike_satacom
Files
-
2025-05-19_205802ce966ce66d0ffab32968d29284_black-basta_cobalt-strike_satacom.exe windows:6 windows x64 arch:x64
ccaa99cd76e6ae1845f3ae543fcb8c7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
RtlUnwind
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
DebugBreak
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
CloseHandle
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LocalFree
EncodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
CreateFileW
WriteConsoleW
SetEndOfFile
windowscodecs
WICConvertBitmapSource
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zero Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ