Static task
static1
Behavioral task
behavioral1
Sample
bf75c484b62950ba8d93e789c235c15f32f5b4998240a8b561185230633faa12.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf75c484b62950ba8d93e789c235c15f32f5b4998240a8b561185230633faa12.exe
Resource
win10v2004-20221111-en
General
-
Target
bf75c484b62950ba8d93e789c235c15f32f5b4998240a8b561185230633faa12
-
Size
20KB
-
MD5
fb3a950e44ae2261c1fd5d26f86404bf
-
SHA1
89f596e56ea49db91bd68caf352aa09f9707a5da
-
SHA256
bf75c484b62950ba8d93e789c235c15f32f5b4998240a8b561185230633faa12
-
SHA512
ed1266fd09bfe3ca0a803ae10191366d79e15aae0363464dc40b1979fdaa728e773da35f6f110be79fc53fa1ad2ecd79f829609ab6c5aabb99a5aab091075ca3
-
SSDEEP
384:PUtHWkSxjNMbnY8t77qZ539SnM7vnK7rjvQlleQX0VEEGB7qbbrk5:PUtHcjWbYq77u5NSnWK7rrA/X0+B7q/2
Malware Config
Signatures
Files
-
bf75c484b62950ba8d93e789c235c15f32f5b4998240a8b561185230633faa12.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Obsidium Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Obsidium Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE