Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
74708639af3add94f159cc14c291f4e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74708639af3add94f159cc14c291f4e1.exe
Resource
win10v2004-20220812-en
General
-
Target
74708639af3add94f159cc14c291f4e1.exe
-
Size
640KB
-
MD5
74708639af3add94f159cc14c291f4e1
-
SHA1
d988103baf9e95b1b129b6226ca587389ec4bfe6
-
SHA256
060a619222ca31fb3ddc58c9f0faa45e05016d13cd9c32709d55ce5f40e4c621
-
SHA512
9434f5eaec1944741f3940f0d666d2b41959269aac5ea10338004ee06c7405c010140a229479474b85ce4c50b44d086081beca2c577b775124322e10478a63b9
-
SSDEEP
12288:aCe8LxGQ7MRSRAsDYeQBWlWc4b70eU06zTwjZ++R5Mi6/ZVgCp0TLAXZoCzZW:aN88Q7aQjDYLWlhW7JUyZ++R5PyZ5pcQ
Malware Config
Signatures
Files
-
74708639af3add94f159cc14c291f4e1.exe.exe windows x86
755b26ee88bff31382938e00e4a0bfa6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetConsoleWindow
wsnmp32
ord106
ord999
ord220
ord300
msacm32
acmFormatEnumW
acmDriverRemove
acmDriverClose
acmDriverPriority
resutils
ResUtilGetResourceNameDependency
ResUtilIsPathValid
ResUtilGetPropertiesToParameterBlock
ResUtilSetBinaryValue
ResUtilResourcesEqual
ClusWorkerTerminate
ResUtilVerifyPropertyTable
shlwapi
ChrCmpIA
ord10
PathIsRelativeA
SHGetValueW
PathRemoveBlanksW
winspool.drv
EnumPrinterDriversA
ord208
StartDocDlgA
ord206
ord207
SetJobW
DeleteMonitorW
rtm
MgmGetFirstMfe
RtmBlockConvertRoutesToStatic
RtmDeleteRoute
RtmCloseEnumerationHandle
MgmTakeInterfaceOwnership
RtmRegisterClient
mpr
WNetConnectionDialog1A
WNetGetNetworkInformationA
user32
GetKeyboardLayoutNameW
OemKeyScan
SetClipboardData
DrawMenuBar
ShowWindow
UserHandleGrantAccess
gdi32
GetFontUnicodeRanges
comctl32
ord328
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ