Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
c45eb0f8bcad12ac47566c048e33ab36152b5f8e12f34a0d8b3f7a00d6180387.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c45eb0f8bcad12ac47566c048e33ab36152b5f8e12f34a0d8b3f7a00d6180387.exe
Resource
win10v2004-20220812-en
General
-
Target
c45eb0f8bcad12ac47566c048e33ab36152b5f8e12f34a0d8b3f7a00d6180387
-
Size
14KB
-
MD5
41d37ea07c5237c87ef69336b1e530be
-
SHA1
1b7e9517327c5dd0d22a46f6728e81936c4a41fa
-
SHA256
c45eb0f8bcad12ac47566c048e33ab36152b5f8e12f34a0d8b3f7a00d6180387
-
SHA512
73390d5b51fc5f2f227c562c38c131ff10205b9c6df10cc8cf44375aa8a348a5140f94e5766c22dba556a2c2eac53d525af6deacf3a43e26a565454cfc1ac086
-
SSDEEP
384:CcfGqHxrz554Ep/oehlanftPzY1RkeZ+JC:C8GOxrX4E9llanfF01RkY+J
Malware Config
Signatures
Files
-
c45eb0f8bcad12ac47566c048e33ab36152b5f8e12f34a0d8b3f7a00d6180387.exe windows x86
a742ae6da25ec951c88e009bf896d455
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
GetWindowDC
GetParent
DialogBoxParamA
kernel32
LoadLibraryExW
_lwrite
_lcreat
Sleep
CloseHandle
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
SHGetFolderPathW
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lljkuhw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE