6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6b85abceea...7d.exe

windows7-x64

8

6b85abceea...7d.exe

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d.exe

Resource

win7-20220812-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

General

Target

6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d
Size

299KB
MD5

67e90c38bf3d4f868cf1cc4a5f612230
SHA1

2da64c880e2329d66a2a7a4bd69de0b814ef32e9
SHA256

6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d
SHA512

0da010ce77dd30f18543b1c553bc3a47351fd43ecf73e78c381187e9ab9a8ba40029a5d120c8f34167d78a96a7a7e670460a0f0feaadb4449b39414913c692fe
SSDEEP

6144:63QqI/8IV7hSMzHjQ29jZ6rRzLoCHocb1mlA1W9fPtE6q7f8l:Ks/z4ujIRPocUlAz6qL8

Score

N/A

Malware Config

Signatures

Files

6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d
.exe windows x86

b94817150593d009e5fdd86947f5d54f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReleaseMutex
GetStartupInfoA
CopyFileW
GetFileSize
IsValidLocale
WriteConsoleW
lstrlenW
WriteConsoleW
GetFileAttributesA
WriteConsoleW
lstrcpyW
CreatePipe
HeapCreate
IsBadCodePtr
GetModuleHandleA
SetPriorityClass
IsBadStringPtrA
GetFileTime
GetLastError
CloseHandle
GetCurrentDirectoryA

msftedit

SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichListBoxWndProc
RichEditWndProc

shell32

DragAcceptFiles
SHGetMalloc
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ShellAboutA
ShellAboutA
SHGetFileInfoA
StrChrA
ExtractIconA
SHGetSettings
DuplicateIcon
ShellMessageBoxA

msasn1

ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.