Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
35ed64be314538c7a7a019331fe2c4faff7fd55c93f9a9bc5911cd705a60e90a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
35ed64be314538c7a7a019331fe2c4faff7fd55c93f9a9bc5911cd705a60e90a.exe
Resource
win10v2004-20220414-en
General
-
Target
35ed64be314538c7a7a019331fe2c4faff7fd55c93f9a9bc5911cd705a60e90a
-
Size
168KB
-
MD5
a69ec18cd982181a5fbd2789663a88bf
-
SHA1
7d44fdc6938916a54103169d1de0032ddeab0e35
-
SHA256
35ed64be314538c7a7a019331fe2c4faff7fd55c93f9a9bc5911cd705a60e90a
-
SHA512
f61baf6748f3c7a5da5e46693274e8d748699199c187a3dbb550747832fcade594f618ffbc5cbba5aa3848ec716ec8f2fb8267c8d2b15e9f63687ad1211f6900
-
SSDEEP
1536:PylLjLfOn8rFzajjROVo6nesYoRMgjXpCwAMriMBURznbbBFqzuyJzMNQQ7t:PylLPfY8ecVlneYXpCXknBURznb9Ok
Malware Config
Signatures
Files
-
35ed64be314538c7a7a019331fe2c4faff7fd55c93f9a9bc5911cd705a60e90a.exe windows x86
54dc4fa00aed2dfea3bfa727027b942d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
FormatMessageW
GetExitCodeProcess
GetFileAttributesW
CreateFileW
lstrlenW
WritePrivateProfileStringW
GetNamedPipeHandleStateW
LCMapStringA
GlobalAlloc
GetLastError
GetProcAddress
RemoveDirectoryA
OpenWaitableTimerA
CreateHardLinkW
GetPrivateProfileSectionA
GetCurrentProcessId
GetCurrencyFormatW
SetCommTimeouts
WriteFile
GetModuleHandleW
SleepEx
GetDriveTypeW
IsBadStringPtrW
FindFirstFileExA
FindResourceA
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringW
advapi32
LookupAccountNameA
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ