Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
5b85f622184aaff248a1cf1a3c8fdecd.exe
Resource
win7-20220812-en
General
-
Target
5b85f622184aaff248a1cf1a3c8fdecd.exe
-
Size
1.8MB
-
MD5
5b85f622184aaff248a1cf1a3c8fdecd
-
SHA1
cad52050a0892303d857e2bb7d2324783e4d996d
-
SHA256
893a2003f1dc43aeea8aaef945e20044b2442e1a2aecdd0bf260e30a6b472689
-
SHA512
c7af49d20623e988b742002e9c60ec791f94c4794d73ada36e8956677dde4bbe0a6efcdee374dfaa3739814432b3bae3fce814f7190f92fecb75031320c87dc0
-
SSDEEP
24576:bYon2pir16WrJrDVNPLDRBh6EMII/QhGY9fIkRcD4R3ugA+IChSAD/v1XGCD2C65:ZzJrDVNPtq4hj9tRcu3uPKSqzX
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242
Files
-
5b85f622184aaff248a1cf1a3c8fdecd.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 929KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 125KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 637KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 61KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fsdf Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE