0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a | Triage

Submit
Reports

Overview

overview

8

Static

static

0279fb48bf...4a.exe

windows7-x64

8

0279fb48bf...4a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a.exe

Resource

win7-20220812-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

3 signatures

150 seconds

General

Target

0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a
Size

495KB
MD5

8034babe9d23cbc039ab3eacbbcbb570
SHA1

b2555f5f0a86f39f40fb734318491f9eadf4dbc3
SHA256

0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a
SHA512

0e7f30e37e79c6b363e2b148b81e318ad508a6586b6ec4b66d0d5ad8f405d985c45458f6847349a17d958fab99e8a5c00192776ef7c18b577a0b9ede78dcce42
SSDEEP

12288:MgSxFMiYmVAviv5Z8nt1UkAthdYAH206qODyvex:Mg0FlDVA7t1UkArdYAWz8K

Score

N/A

Malware Config

Signatures

Files

0279fb48bf20cec064022097feac436689617868a2aba0a24f81d854b06ec04a
.exe windows x86

91b9d16df63fda33e0171a72162c99e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW

user32

GetWindow

shlwapi

PathAppendA
PathAppendW

crtdll

__GetMainArgs
exit
raise
signal

ulib

?Strcat@WSTRING@@QAEEPBV1@@Z
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 292B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2025

Terms | Privacy