Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
854a7803a91e32fc1aec37b1554d4f79a530f53d6e3915a6cf751bc18b40d786.exe
Resource
win7-20220812-en
General
-
Target
854a7803a91e32fc1aec37b1554d4f79a530f53d6e3915a6cf751bc18b40d786
-
Size
620KB
-
MD5
a7175c8da0c55785af3d40933add1b7c
-
SHA1
691c7eb178a8a1c8318ba69edbc7ae6f1dec0911
-
SHA256
854a7803a91e32fc1aec37b1554d4f79a530f53d6e3915a6cf751bc18b40d786
-
SHA512
02e28b9fb318bbeede5380c643cee75218e35ddbab5fc6a17803b38b024c63570018100cab5eb0eec284efa875f65fea0d0d00342bb202ac72b0f44e1f122cb5
-
SSDEEP
12288:sOiwWX6EZYD/FHY6FjTbY0yRIACnei6nzoQYrswl9RkshGLpPp4iiWvcD8n:Hiwi6Eu4ovHAge5zoQYrsqqPp9iWH
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
854a7803a91e32fc1aec37b1554d4f79a530f53d6e3915a6cf751bc18b40d786.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 56KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 552KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE