Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
3bff6d6cad0c4ba59578cc5027c088406bcfebf18af1a0af0db3862128d14f46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3bff6d6cad0c4ba59578cc5027c088406bcfebf18af1a0af0db3862128d14f46.exe
Resource
win10v2004-20221111-en
General
-
Target
3bff6d6cad0c4ba59578cc5027c088406bcfebf18af1a0af0db3862128d14f46
-
Size
270KB
-
MD5
b45b717cd5371a8be8e6a472ce0e02a1
-
SHA1
41439c8a3d8012e3aee1f08e9b4c072cf2bb07d5
-
SHA256
3bff6d6cad0c4ba59578cc5027c088406bcfebf18af1a0af0db3862128d14f46
-
SHA512
8ce0ac18bd3e6c21ef5173c637fcdcce03373b972e6f553964a77d5f830566e4a1855ddc2aa20a943a04bcf5584e8c6ed62fcc600235ed9702bb7edebc1b7468
-
SSDEEP
6144:NW9Ak9dCngaxBA3s+mUNkwxCKq7pNZNyDV790LB3/Mzefjctl0Y:NWqknCUsDYkwUKuJAVJ0NBfjI0Y
Malware Config
Signatures
Files
-
3bff6d6cad0c4ba59578cc5027c088406bcfebf18af1a0af0db3862128d14f46.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
2f:d9:13:0f:6a:cc:51:87:4f:2b:6c:49:be:05:e4:4dCertificate
IssuerCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}Not Before24/05/2014, 21:19Not After25/05/2015, 03:19SubjectCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}2f:7b:05:1a:f8:44:8b:5f:27:71:b1:3d:d6:21:87:94:af:ff:70:f7Signer
Actual PE Digest2f:7b:05:1a:f8:44:8b:5f:27:71:b1:3d:d6:21:87:94:af:ff:70:f7Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN={75F8BB5A-A5BE-4EED-BD1C-7F6E55702F48}17/11/2022, 13:14 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ