Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

PDFShaper_...ch.exe

windows7-x64

7

PDFShaper_...ch.exe

windows10-2004-x64

7

PDFShaper_...ch.exe

windows7-x64

7

PDFShaper_...ch.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    66s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2022, 05:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PDFShaper_v11.3+_x32_Patch.exe

  • Size

    62KB

  • MD5

    9335000c91c95bb429a06fa897f8c47f

  • SHA1

    155ae8804fb8aa199a0a85f774e342af613514c9

  • SHA256

    0017a2b0a8ef8ef956037bd22e524d8c5ee00a2272ddfcdbe2fcf7e360005965

  • SHA512

    c9893beb1b05ee8b18036d0dd466a514129853a50fc5e1076d3fe9f83aba78198ceb745d5e3c1a5ab6be91507e0e66eef42b2d71d953e5496707255a59484590

  • SSDEEP

    1536:0Yapd3o/Y6PLoFdXvQk8SYhtStvhMc5OtFNKxoZWc+b:0Ym3obDk/QkYa1inc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PDFShaper_v11.3+_x32_Patch.exe
    "C:\Users\Admin\AppData\Local\Temp\PDFShaper_v11.3+_x32_Patch.exe"
    1⤵
    • Loads dropped DLL
    PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\dup2patcher.dll
    Filesize

    56KB

    MD5

    d3e646554778c38a5ab2912a91587190

    SHA1

    2bb5ddefc6cd81785a68a68ec656511dec3850de

    SHA256

    eeef8230a5193441e0501926affda09f4978a9872245db25e10543497d041548

    SHA512

    5446759667b65f0be147e0777e97a576406cc7fec6b2048e82d69adacaa8e8553b14297178c146e7d113ebc8951f9ebf3e775c442519e40c99f827484ab5a8c5

    Download Submit

  • memory/640-133-0x0000000075A00000-0x0000000075A26000-memory.dmp

    Filesize

    152KB

    Download