Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
90382d070f58dd0a9f21d05327c2589116e2271e2cce2cce69018e1f4d836c0f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
90382d070f58dd0a9f21d05327c2589116e2271e2cce2cce69018e1f4d836c0f.exe
Resource
win10v2004-20230220-en
General
-
Target
e2b30c0c90faeeb878ed21be152d2dc1.bin
-
Size
1.4MB
-
MD5
612a92fff7663102d0b83a90e8088b81
-
SHA1
bcc2354b69bb486feb0d260921aa3a6044d54c01
-
SHA256
35c689f6d9ff3382b9fbd46bcd79037983c2582f75b50ec19dc86f1db09fda89
-
SHA512
0b6a985387f91d01603ceb27c8c0d37ff06a1be52228d0824ac593085b1c17b05de84c6b5154f63a0d0c263313cc8f13bbf5e21a3f16447c2fbcd89f2df9ef7d
-
SSDEEP
24576:6okWlrfZ+gkDzueZbs0a7OGvQhuNYhyZsl1IhU1aXYJifZy7V1yIEWyK60tcDU5+:6okWRS3uwU7MhThrbIy1aX0yZy1EWy6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/90382d070f58dd0a9f21d05327c2589116e2271e2cce2cce69018e1f4d836c0f.exe
Files
-
e2b30c0c90faeeb878ed21be152d2dc1.bin.zip
Password: infected
-
90382d070f58dd0a9f21d05327c2589116e2271e2cce2cce69018e1f4d836c0f.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ