Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48.exe
Resource
win10v2004-20230915-en
General
-
Target
a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48
-
Size
1.3MB
-
MD5
9c39f93c41464571c61a9e6ad689b91a
-
SHA1
fb2ee625d3b88af6bf5519281250c09da171d438
-
SHA256
a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48
-
SHA512
8611e1f076240b18b70a417acba548c7e5111cd20a1390a596eb30b49faa29d40e12f51acf03fe5e9602fd635ba2feb946574664a3945e0199e2cc91690ff59f
-
SSDEEP
24576:yP3oWsSQq42nyvUPZ8lvIEK4GyiqRs1wc1EHSLgQyqa5M8VN2W2OI4:cYNqyM1wGy2f1mQ7aiJOP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48
Files
-
a7c4285218581fc609232793a82c091b1855f120ea4484536140533907fa7a48.exe windows:4 windows x86
c6baa16dd13072bad79a7b3c7b2a671b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
user32
InvalidateRect
gdi32
PtVisible
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegSetValueA
shell32
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
CoRegisterMessageFilter
olepro32
ord253
oleaut32
VariantClear
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 248KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ