Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
2428300eaca9fcd5d2170b811a464b4591e9391ea57e95fa217b02d3328e7419.exe
Resource
win7-20221111-en
General
-
Target
2428300eaca9fcd5d2170b811a464b4591e9391ea57e95fa217b02d3328e7419
-
Size
474KB
-
MD5
95ce031c5273b6c1f2d813566a7ea9ea
-
SHA1
f47a1a1502de7a0b9cae47037e06f41753d94156
-
SHA256
2428300eaca9fcd5d2170b811a464b4591e9391ea57e95fa217b02d3328e7419
-
SHA512
5a2fa3a7413c672714d38b6d60e5794481c871ba402f92bc97a6e37b7fed466212060a8d7a560a900c8637ab6b39d8c619fc528d5ec8e303fd98efd89db57cdc
-
SSDEEP
12288:pvv0rmiMQTll4pWWUgyOHaW8xAyBhh4YIRRioMZtKOIiVywxGkoS:Bd2ll4XZGxAyBbrCeVIkywx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2428300eaca9fcd5d2170b811a464b4591e9391ea57e95fa217b02d3328e7419.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE