e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

e6b0d5b291...26.exe

windows7-x64

8

e6b0d5b291...26.exe

windows10-2004-x64

8

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26.exe

Resource

win7-20220812-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

150 seconds

General

Target

e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26
Size

164KB
MD5

79df60b1842db452583440e91f8fadd0
SHA1

9adc7056bf6e67b947cfd9dc647940cbea18a413
SHA256

e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26
SHA512

e414449370357cd6e65bdd7d6576f81cf002d02fef17278ef2eb65ae45ada8c98cf96b3d0f2e1438281f88ef264877a1a42eda35ac9569ebf0be6643e4afa273
SSDEEP

3072:phj0Hzpm9Tcek9R7dE62yiV5AO/aWeVomBhGYt7R:30TpeceRF7aI+rR

Score

N/A

Malware Config

Signatures

Files

e6b0d5b2918cdf866869a07a2ba2cdff6248c66fb75fe76b735920f1ab212e26
.exe windows x86

175d131b0836fd4e95ea7b7a4a7f44d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempPathA
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
LoadLibraryW
FreeLibrary
LocalFree
LocalAlloc
SetLastError
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
lstrcmpiW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

crtdll

__GetMainArgs
exit
raise
signal

netapi32

DsGetDcNameW
NetApiBufferFree

advapi32

RegOpenKeyExW
RegCloseKey

user32

wsprintfW

framedyn

??0CHString@@QAE@XZ

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 322B - Virtual size: 322B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 486B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.