e5c28e3ac87bbb2024004844926484647f017dc5c506405873539b59ad0a64a4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

PI List-pdf.exe

windows7_x64

PI List-pdf.exe

windows10-2004_x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

PI List-pdf.exe

Resource

win7-20220414-en

masslogger collection evasion ransomware spyware stealer

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

PI List-pdf.exe

Resource

win10v2004-20220414-en

masslogger collection evasion ransomware spyware stealer

windows10-2004_x64

0 signatures

0 seconds

General

Target

e5c28e3ac87bbb2024004844926484647f017dc5c506405873539b59ad0a64a4
Size

652KB
MD5

1b30b6afdf156a4ee5857c56064436c8
SHA1

02fded2b6111d580eea704b38ba72fbc9b00c592
SHA256

e5c28e3ac87bbb2024004844926484647f017dc5c506405873539b59ad0a64a4
SHA512

26a9c67764aad38dc6f239d913ad3d21e3f790c3030fa193d28772061d78f7e7cca3c5b6beac6d9f8b8624c41992f59eca3b3238171eaa9434276eacb6a67373
SSDEEP

12288:HM44+S8zKKko82HGEtkkTpRp3oWMzbSxICGokvmciK8wrAu1JqigL0ejsuqELx1i:HllzK36kkT3p4WeOxo7mRKH71JPgLZje

Score

N/A

Malware Config

Signatures

Files

e5c28e3ac87bbb2024004844926484647f017dc5c506405873539b59ad0a64a4
.zip
PI List-pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.