Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
56d675b94ed40dcb422a2456ad30f60256b5dda9f1e20bc519bd58abd25ad817.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
56d675b94ed40dcb422a2456ad30f60256b5dda9f1e20bc519bd58abd25ad817.exe
Resource
win10v2004-20220812-en
General
-
Target
56d675b94ed40dcb422a2456ad30f60256b5dda9f1e20bc519bd58abd25ad817
-
Size
536KB
-
MD5
dcf1d09fadd3f5a019fe454bfb5421d4
-
SHA1
a9a16c7f7c1c5e6d30a5b18625874fae136a1ba3
-
SHA256
56d675b94ed40dcb422a2456ad30f60256b5dda9f1e20bc519bd58abd25ad817
-
SHA512
e4d90fae0d1017052c05b44da9e42c6f323e01aaf3f650e8ff07cb9d352766a70910d77f88ef1e509f0dc9e615caabbeedc430e16e79286145059bc219860509
-
SSDEEP
12288:PvwVa5L9B/S5cCo4GgKUX/QgIVlFMPxC15J:Xw4lXCo4JnclFixC15
Malware Config
Signatures
Files
-
56d675b94ed40dcb422a2456ad30f60256b5dda9f1e20bc519bd58abd25ad817.exe windows x86
4e9d60ef325bc0613d11e3fe26c2e945
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
MethCallEngine
ord661
ord593
ord595
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord672
ord675
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord609
ord538
ord571
ord685
ord100
ord616
ord546
ord547
Sections
.text Size: 528KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ