Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
4f4991b4f399f131961bd10d1a105cc8081c220777c52e13790707d9b6cefaa6.exe
Resource
win7-20220715-en
General
-
Target
4f4991b4f399f131961bd10d1a105cc8081c220777c52e13790707d9b6cefaa6
-
Size
496KB
-
MD5
1e47a80f9e077c1f08fc49d35883b5d9
-
SHA1
8b40a8b811ea2d18c6ac5caf6151b3f7ac8eeebd
-
SHA256
4f4991b4f399f131961bd10d1a105cc8081c220777c52e13790707d9b6cefaa6
-
SHA512
442f9558e1bec6a817d5d4735aedde62d953877b40e49d1ed04df6a9792aaa57c10e1ca41be468f8dbf8f71b6393d82778a155053eb1a47253043e3f20db65fe
-
SSDEEP
3072:neppqHD1H+sNsTabF9APRDk8c54EC+sMyQ9ZIC3fwNCqCRjHciQUYGmEzLMcsVww:sagebF9c4n5OxHCPuCqCRYiQUnMZXQm
Malware Config
Signatures
Files
-
4f4991b4f399f131961bd10d1a105cc8081c220777c52e13790707d9b6cefaa6.exe windows x86
5d55613d1ec3a25a510e30e28213c8db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrChrNW
wininet
FindNextUrlCacheEntryExA
FindFirstUrlCacheEntryExA
advapi32
RegSetKeySecurity
GetCurrentHwProfileW
kernel32
FindFirstFileExW
GetModuleHandleA
GetBinaryTypeA
secur32
FreeCredentialsHandle
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 321KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ