Static task
static1
Behavioral task
behavioral1
Sample
trillian_patch_francais_francais_10442.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
trillian_patch_francais_francais_10442.exe
Resource
win10v2004-20220812-en
General
-
Target
trillian_patch_francais_francais_10442.exe
-
Size
221KB
-
MD5
044dbe736ab3c4cf2a8a51105f508eb7
-
SHA1
2ae0267dbfa63a10756f9fc7ae95abf445cd091c
-
SHA256
23b03b132633d01d09bce56240d284b2686dcbd2970483a149cd7494c26d9747
-
SHA512
6b6499d279a1108b177837bb02bc88905982408c1039e74f3e972192eb7701d20800072660f39e8107c82f73d9e9dc8e80806fe901d37e3b13c9c0e144b853ff
-
SSDEEP
3072:ZcAVLQ4Mod0mZ+6e9JioKltzbXSTnl7WzqS5E5pGyUvwAglyZPqXMHJ6JK9XqhGp:GPPh6VrzAMzrEbEYtyZSXCJUhGKWrw65
Malware Config
Signatures
Files
-
trillian_patch_francais_francais_10442.exe.exe windows x86
4c47d6cb7d055efc377feec933793330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetDriveTypeA
FindClose
GetPrivateProfileStringA
GetModuleFileNameA
GetShortPathNameA
GetVersionExA
MoveFileExA
WritePrivateProfileStringA
GetTempPathA
GetFullPathNameA
SetFileTime
GetWindowsDirectoryA
GlobalHandle
lstrcatA
LocalAlloc
WinExec
GetDiskFreeSpaceA
FindFirstFileA
GlobalAlloc
WriteFile
GlobalUnlock
GlobalFree
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetLastError
MoveFileA
CloseHandle
DeleteFileA
RaiseException
LocalFree
SetFileAttributesA
SetFilePointer
GetCurrentDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
HeapFree
HeapAlloc
CreateDirectoryA
HeapSize
RtlUnwind
HeapCompact
ReadFile
IsBadReadPtr
CreateFileA
GetStringTypeA
LoadLibraryA
GlobalLock
GetFileAttributesA
GetStringTypeW
IsBadCodePtr
GetProcAddress
user32
DestroyWindow
SetWindowPos
SendMessageA
GetSysColor
GetWindow
GetDlgItem
ScreenToClient
GetWindowRect
BeginPaint
EndPaint
FillRect
ReleaseDC
GetClientRect
SetWindowLongA
GetDC
SetDlgItemTextA
wsprintfA
SetWindowTextA
GetSystemMetrics
GetParent
PostMessageA
GetDlgItemTextA
OemToCharA
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
GetLastActivePopup
BringWindowToTop
AdjustWindowRectEx
UpdateWindow
IsIconic
RedrawWindow
PostQuitMessage
DefWindowProcA
ShowWindow
KillTimer
SetTimer
SetFocus
DialogBoxIndirectParamA
EndDialog
EnableWindow
MessageBoxA
CreateDialogIndirectParamA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
gdi32
CreateFontIndirectA
GetSystemPaletteEntries
CreateSolidBrush
DeleteObject
GetStockObject
ExtTextOutA
SetBkColor
GetObjectA
GetDeviceCaps
StretchDIBits
CreatePalette
SelectPalette
IntersectClipRect
RealizePalette
SetTextColor
SetBkMode
TextOutA
SelectObject
DeleteDC
CreateDIBPatternBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
comctl32
ord17
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ