Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f876084f0a4c4921043f0c5d9a300a10.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
f876084f0a4c4921043f0c5d9a300a10.exe
Resource
win10v2004-20220310-en
General
-
Target
f876084f0a4c4921043f0c5d9a300a10.exe
-
Size
295KB
-
MD5
f876084f0a4c4921043f0c5d9a300a10
-
SHA1
26750325c38616947a66fcf4132afd30bdccbbe6
-
SHA256
04b8f38bffca4122470e8af1b123630809bc7a6fb4e66a3e0a99f82133c9bdf1
-
SHA512
577f59015f58f6a7f6353b183293d834bea07aed8bf970a14888551239c3cca1eb4915ea3768efa697c82a53d33be50eb3a4d279c0ce4a77eb700f8045117587
Malware Config
Signatures
Files
-
f876084f0a4c4921043f0c5d9a300a10.exe.exe windows x86
6dc76534a71225c5adf2ef004034f9e9
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
FileTimeToSystemTime
EnumResourceTypesW
EnumResourceNamesW
FillConsoleOutputCharacterW
GetTimeZoneInformation
TerminateProcess
SetLastError
SetEvent
FindNextFileA
GetCompressedFileSizeW
CopyFileExW
BuildCommDCBAndTimeoutsA
QueryDepthSList
GetVersionExW
VerifyVersionInfoW
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
VerLanguageNameA
EscapeCommFunction
WritePrivateProfileStructW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeMountPointW
GetWriteWatch
WriteConsoleInputA
SetComputerNameExW
FindAtomA
GlobalDeleteAtom
SetThreadPriority
CallNamedPipeW
GetDriveTypeW
VirtualProtect
LoadLibraryW
LocalAlloc
InterlockedDecrement
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageW
SetDllDirectoryW
GetModuleHandleA
WritePrivateProfileStringA
GetUserDefaultLangID
GlobalUnfix
GetStartupInfoW
GetSystemWow64DirectoryW
CopyFileA
GetLastError
DebugBreak
SetConsoleCursorInfo
SetCalendarInfoA
SetConsoleScreenBufferSize
ContinueDebugEvent
InterlockedExchangeAdd
GetSystemWindowsDirectoryW
GetACP
GetPrivateProfileStringW
FindNextVolumeW
GetConsoleAliasW
OutputDebugStringW
EnumResourceTypesA
lstrlenA
WriteConsoleW
DeleteCriticalSection
GlobalWire
FreeEnvironmentStringsW
lstrcatA
EnumCalendarInfoA
SetThreadAffinityMask
LockFile
RaiseException
VerSetConditionMask
SetConsoleCP
GetProfileStringA
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameA
SetComputerNameA
GetConsoleAliasExesLengthW
WriteConsoleInputW
CreateMailslotW
GetCommState
MoveFileWithProgressA
GetSystemTimeAdjustment
_hread
_lopen
EnumSystemLocalesW
GetConsoleAliasExesLengthA
MoveFileA
ResetWriteWatch
EnumDateFormatsW
DeleteAtom
GetSystemWindowsDirectoryA
GetComputerNameW
GetConsoleAliasesLengthA
FindFirstVolumeW
CancelDeviceWakeupRequest
AreFileApisANSI
OpenWaitableTimerA
OpenFileMappingA
SetProcessAffinityMask
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FindNextVolumeMountPointA
ReadConsoleW
WriteConsoleOutputCharacterA
GetNumberFormatW
GetConsoleAliasExesA
GetBinaryTypeA
GetCurrentActCtx
InitializeCriticalSection
WriteProfileSectionA
SetLocaleInfoA
CreateActCtxA
LoadLibraryA
GetModuleHandleW
Sleep
InterlockedIncrement
GetProcAddress
ExitProcess
DeleteFileA
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleFileNameA
WriteFile
GetStdHandle
GetOEMCP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
user32
CharToOemBuffW
GetListBoxInfo
gdi32
GetCharWidth32A
advapi32
ImpersonateSelf
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ