Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
15e6a048813e1fa7e06751b3cccd6125d7b8efb3ed160931213ac44eafa60807.dll
Resource
win7-en-20211208
General
-
Target
15e6a048813e1fa7e06751b3cccd6125d7b8efb3ed160931213ac44eafa60807
-
Size
529KB
-
MD5
96ede22c743f990a839949fb3edd381b
-
SHA1
2506fb0f8e03108b5e4ee4555e6d9f309f4f8936
-
SHA256
15e6a048813e1fa7e06751b3cccd6125d7b8efb3ed160931213ac44eafa60807
-
SHA512
14922ce98535243e4f6e5c771c02397027b75b3e73ae807335dbcb97b653fc517010d89565ca6e0399a5012d40774455318a120ae5eb3f84693f9f0da1c1ed11
-
SSDEEP
12288:uMFaRxiRVw4GEBkvkNbBUT29aCBYC8Hc/sdL9nHGqxHZC5g:uMkxh49kvkNbHCW0d5HG0Ce
Malware Config
Signatures
Files
-
15e6a048813e1fa7e06751b3cccd6125d7b8efb3ed160931213ac44eafa60807.dll windows x86
26e34cf36a6751e2ee3b24f776d677bf
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
Sleep
LoadLibraryA
OpenMutexA
DeviceIoControl
VirtualProtect
GetCurrentDirectoryA
GetTempPathA
CloseHandle
CreateFileW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
EncodePointer
GetModuleFileNameW
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
GetModuleHandleW
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
WideCharToMultiByte
GetTimeZoneInformation
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
FlushFileBuffers
wtsapi32
WTSOpenServerA
WTSCloseServer
WTSQueryUserToken
WTSLogoffSession
Sections
.text Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ