�ϫ�<����v�-<[C:8������L�6U��Ί�� �;�>g�����ڇ�r�b���Ow���-���냺������D�%*FL-J5����Z�H�I�R�N�:h��MB���M8���!� ]���{S���R�E+�bF��G���@|$���^�6��訫Zi�i`[H\S~$���S�T�(�y_A)3������ٯ4(.�:���;��SI��#)s�Ȧ���9U���Y�2��[xv��g�sr�����.9���+8�gn5��dK|�m0+=������~"���~}����f4�<��ו!���q�hC+3`��{��q2`����*������ߝ:$�%�(��9 +'T^�#np(�&�Y-��Pb�\\�2���6�s�Fٛ2��)��|�a��X�)����\I=���� �p\w�U���e��Gt�I�WP0u&�ۓ����t9 �4s�RS�]�����G:]��p�Yq}Heq�l#-�������c�J��/��z�ΰ�l�F�Jmk������B���/�*n�d�]u�p��_����+�:�5�K9b�U��6Y������94��U����ll�&��:����;7�3W�W��sL�U#}�L:Y����v�[t��̲3���dž�,���f�<�n ��q2�;g��J�SWK.�GxR+*��K/S]�V�<ek~֦�E��K��v�?eN亨4���z��%�~V��x�[�4h��VA�kf���:r*���kq���@ⰽʚǷ���&��z���RD�C��I�uc�8�uon��4?Ǯsi�����T�/��r��(o1���a_�s�����Q��Y'�I8���2���3kL6�z+��r� �����;r��9�:*;��R�X��g�`��-��X�GO1�C�.3��$ ͥ���Gp&ڜ.�r�" ���Wⅽ�D�U ��&ʦݲ,���@_f����m���.���9�>�o/�ٝ��P��y��hPJ�����Xdpܝ�4��d ]'G&�� )ns.��������r���Τ�;�K��F�Rq��02�Đ���|f������%� �ft�DG�j�@���Z�dJ�+^��u��y>���^D���j� \n"�0;�Ia��g�f'�ԃk�7�?���qu��Qv `�3�X{9��;�S�UP�$Z���th�"͛X��}]�)���O���c�t�T���Y72а�� � �������3Z0�&%� G(v��☮�ϩ�í˧N�]�)0����>�'����Q�[f����J*�:��}wF�u6�`N�n�hU}څ��}�W?�����艴t��NT��)��>�V�מ�����_ ���Tccnp���p�ؖoJ��˗�q����+��<A�Vǣa�3�8W8*9�八�d���~.���5Hm"8�S��G�'b</3jQ$���U���iz�g&3U��9���uy���Ρ�㦎�Fj!x��W��r��� ۾�U�D7�D�_C��vAoNh¬��ڭ�`��F�12^�.��n|����' ��t�X�`��y����0�2�_W��~Ӧ�JS�?�?�J�&���T��P����e(A4���"]l�<�Eu���j<���T\�O�v�8�����gO֭���~u,S�q��!6T����Ό���o����o��*l=�`,EA�I�%�+�lr2�_�l6�2$�͋��Y=ncK�ȳ��U���p)"��7�N��IPh0�<O�0�� �����or�2[�]Gu�fׁۨzR�I�}z]+���B(��2t֯������m�4F�\a���'�{iL#w�f����M�����^h!vѽT]%G �V���T� �c0��S�#�ˑ�c��<�����$������j�������w^z{xa�1�2�!�4���D��M�$��M��D��C�"���us;O�o�d���Kdl�@���j��c�^Q?Tէx�����m�$�'&L* !�������~��+B�w�5�=���g�1~����z�ìo�5�J������%O�QRC��.�^Oa4 eRK����7y�A�ח��"���g��b7�����&���=v��wP��w.H��aُ)�m���b֏�T�e]X�[C�> `D@�]Q�#��}��&�����cК�2�K�y쁦�K[���L�de��ƙ���kq%����0Ϝ�oC���"����R�X&&�`�G��1Zښ����1-��)_�����������:,[�;'���S�L��%ܠm����n�~�zk��vX�����?Ӄ�,�x( = kN��Gg,�:�����ZG���������_C���-��OҜC�/����L��L���y)�psS}��p�jK�ǫ50|��&������ K(Z��5{�vQ�w�T]٧M��m�b�d��/�?����x���W@��O����E�S ��8�]�;�G��a~��V���K��M���I�cg��ۉY2{�,x�6������ E���-�{�L��F��7�% ��l*\)L ~����Vj����fz?�4PW�v��<ſSg-����G�q�:)��~�x�N�i\U�1^�`�W�Sn�'N�����%x=f�|�|1�B����Xi�k�B�9�c��qs2���\N?o��/'����Sl����J�|�,xS'�^넢�%��:?��8�A 7 ���\�� a�C�s��oPMX��,���h9�q�~��P"�����>%�b(��〉�Nm����$7j :�x��/N� �+v�50���� ���z����6h�������5��K��~U����)TOo/G�DL�� �Ԕm�D��3²nĞ�P;�9�:ll�x�o1B��D�=r)���.9�|�uX�ν3���ʱWJ�d|�#_�`���R㸽��D�������l-4iٝ��n�|�����%�' �e%���t������o艬�9p�CNcq���h�������8�;��+rUYV���zb�X��9H��K�����S��|������?y{ަ'�����K��P:���lSn
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
066b913c144499e82ec4940f69e0c9808ec67bcf1286444bd1a354574d5fe0d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
066b913c144499e82ec4940f69e0c9808ec67bcf1286444bd1a354574d5fe0d8.exe
Resource
win10v2004-20220812-en
General
-
Target
066b913c144499e82ec4940f69e0c9808ec67bcf1286444bd1a354574d5fe0d8
-
Size
6.7MB
-
MD5
fa8b4a926c4a92d9c7030754507a3b43
-
SHA1
9dd10cf6d3f62ca0c5442098d7384638745865f7
-
SHA256
066b913c144499e82ec4940f69e0c9808ec67bcf1286444bd1a354574d5fe0d8
-
SHA512
6eff68adbdbc2a2ebceb1d13471864f29b4a57e7475e171e44f516e772b9ffc44d55813ac624f9331dbbf5a0d1847c3fda6557ac48224528fdd05b706f35975c
-
SSDEEP
196608:zowzVD6ParFwZnAVkPHPtblKA+qTIlNrTuxm:zbGaRAPHK7Nra
Malware Config
Signatures
Files
-
066b913c144499e82ec4940f69e0c9808ec67bcf1286444bd1a354574d5fe0d8.exe windows x86
93227a0afd0b080ff02b5cc102d1e0d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaFreeVar
kernel32
FindResourceExW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutGetPosition
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ