b66229a5104d24f542566d43309673958eef9053 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

Loader.exe

windows7-x64

Loader.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Loader.exe

Resource

win7-20220812-en

purecrypter downloader loader persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

Loader.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

General

Target

b66229a5104d24f542566d43309673958eef9053
Size

1.6MB
MD5

51c7a3718df0b69af01448f9579c64e2
SHA1

b66229a5104d24f542566d43309673958eef9053
SHA256

752e7d326d94fefa12869bee8c54bfb197d193f151d72f936457a27bbd6b6877
SHA512

6ff620f4367f545aadeff8bad1e894b7561c7e2a4423d42fc8ccde995a05b0a82e26010e0fb5379a8bcbdd743bb434b10962e48fd65ec0ac40f953240e69be79
SSDEEP

49152:MNRPjZGI8HDtJL92m/nNrMs6n8jMUBra1:GLZGhRdtjXO

Score

1^/10

Malware Config

Signatures

Files

b66229a5104d24f542566d43309673958eef9053
.zip
Loader.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.