Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002.exe
Resource
win10v2004-20230831-en
General
-
Target
9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002
-
Size
283KB
-
MD5
ef22f59956d59b3541c8894323653684
-
SHA1
2b1a253236cbcd042ba8ecabd514612263347587
-
SHA256
9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002
-
SHA512
b4477d3cbc5f9dc8f4137b8c5e299cbf86a6ac9b0922041e79357b44019b4860ecee3f2ef6c574390430d062dc9f0f5006a79d56aee2be3c2568c8664f742b31
-
SSDEEP
3072:7lhiWHtXu4xRFJqAdi1YcAQ+crGfoyVszIuAg0FuMoYi9mNos3MiXayzqoCRSeOW:RhiWdxRyA1QkspAOrYiYOPiXzONh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002
Files
-
9fe1bea0667e2a284c2e72012476826c8c8845a87602d83b8d63e331ecccf002.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE