Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
03e81c8df40db6549e905d8832fa1b80.exe
Resource
win7-20220715-en
General
-
Target
03e81c8df40db6549e905d8832fa1b80.exe
-
Size
359KB
-
MD5
03e81c8df40db6549e905d8832fa1b80
-
SHA1
8653cebf8079fa38d845d12e424bcde4afd625b4
-
SHA256
d98129981f18ffdf2db5edd0fc09442cc35ac1458971ca0ed14fe58dcd0dd3e0
-
SHA512
b2999496aa5eb2ca90603a458d96523fc5795365c86e71d5a03cf79b2764ec572d4f1da15207836a78ec0df1b703b0efad46643945ffd5225c607abe5327c9e0
-
SSDEEP
6144:YHh4sTrE+Rv/ValO0Ss3WV/X81zM/DcURiHPpR4vSDkx:wrrbR/MlO0vWNtAciHPb4Ok
Malware Config
Signatures
Files
-
03e81c8df40db6549e905d8832fa1b80.exe.exe windows x86
1b97f05cb610b2d3adc3f233ecd03f7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterW
LocalSize
WriteConsoleInputA
EnumDateFormatsA
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameA
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
LockFile
GetProfileSectionW
RequestWakeupLatency
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileA
FindNextVolumeMountPointA
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventA
CallNamedPipeW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeA
BuildCommDCBAndTimeoutsW
GetShortPathNameW
ReleaseActCtx
GetCommandLineW
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
EnterCriticalSection
FindNextVolumeA
GetExitCodeThread
LoadLibraryA
CreateNamedPipeA
GetSystemDefaultLCID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomW
InterlockedDecrement
VerifyVersionInfoW
HeapFree
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntA
GetConsoleAliasExesLengthW
WaitForDebugEvent
EndUpdateResourceA
SetLastError
ExitThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
CreateIoCompletionPort
lstrcpynW
WriteConsoleA
GetProcAddress
lstrcatA
ReadConsoleOutputA
SetCriticalSectionSpinCount
GetComputerNameW
EnumSystemLocalesA
WritePrivateProfileSectionA
WritePrivateProfileStructW
GetPrivateProfileSectionNamesW
FileTimeToSystemTime
GlobalMemoryStatus
SetTapeParameters
lstrcmpW
SetEvent
MoveFileA
FreeLibrary
GetCommState
InterlockedCompareExchange
GetConsoleFontSize
GetOverlappedResult
LocalAlloc
SetThreadPriorityBoost
SetFileShortNameW
lstrcpyA
HeapQueryInformation
GetFileAttributesA
SetCalendarInfoA
GetConsoleTitleW
SetComputerNameW
GetConsoleAliasesA
EnumDateFormatsExW
SetTimeZoneInformation
GetConsoleOutputCP
GetStdHandle
GetLocalTime
GetStringTypeW
FindActCtxSectionStringA
FreeEnvironmentStringsA
GetModuleHandleExW
LoadLibraryW
GetBinaryTypeA
DeleteFiber
GetSystemWindowsDirectoryA
SetFileTime
GetFileSize
GetNamedPipeHandleStateA
UnhandledExceptionFilter
GetProcessShutdownParameters
lstrcpynA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeA
GetFullPathNameA
ReadConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectA
CreateFileW
DeleteTimerQueueTimer
FlushFileBuffers
SetInformationJobObject
GetNamedPipeHandleStateW
CloseHandle
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileA
user32
GetMenuInfo
LoadMenuW
CharUpperW
gdi32
SelectObject
winhttp
WinHttpQueryOption
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ