3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

3aef4883d4...4b.exe

windows7-x64

1

3aef4883d4...4b.exe

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

General

Target

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b
Size

72KB
MD5

6fa540311977f82f8f3d164e7d13abac
SHA1

2c0a1487249bd190b570238ecf1158faf00d5fd0
SHA256

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b
SHA512

3fe8c8279f77759e8c7896568cd69bc6a01080cb76c505f0860f57b359f9e00375762e80d4a7e0a7a526848b07e5b73b6a6778996466f18ab33e654e913c2ab6
SSDEEP

1536:owhe7MT52OeHqCbMwV+/KwKkv1bGiQWYIf7qdNrJ:owK+52OeHBAwq8yCi5YB

Score

N/A

Malware Config

Signatures

Files

3aef4883d4415fc5a763b01e087b299c706884543b02dc0eb927481ea037664b
.exe windows x86

3fbc57750e101ed642c061bdec088d78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetModuleHandleA
Sleep
SizeofResource
FreeEnvironmentStringsW
GetDateFormatA
VirtualProtect
GetCommandLineW
FileTimeToSystemTime
LocalAlloc
GetCurrentProcessId
LoadResource
GetTimeZoneInformation
MoveFileA
UnhandledExceptionFilter
GetModuleHandleW
GetLocalTime
ExitProcess
GetThreadLocale
GlobalLock
lstrlenW
CreateDirectoryA
GetTempPathA
GetStartupInfoA
DeleteFileA
GetLocaleInfoA
lstrlenA
lstrcpyA
GetExitCodeProcess

msvcrt

_adjust_fdiv
__setusermatherr
_exit
_controlfp
__set_app_type
__p__fmode
_XcptFilter
_initterm
__p__commode
__getmainargs
_except_handler3
__p___initenv

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.