Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
765e53b7873cf667a9ba7e3b4e0f4edf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
765e53b7873cf667a9ba7e3b4e0f4edf.exe
Resource
win10v2004-20231215-en
General
-
Target
765e53b7873cf667a9ba7e3b4e0f4edf
-
Size
213KB
-
MD5
765e53b7873cf667a9ba7e3b4e0f4edf
-
SHA1
1ef4929386dcbdbc0c3b46e391b6ca77bbdec7be
-
SHA256
d3d0b963d898bf3c5413ea1b3a25a11930a033a9533d113afdca78b00256f245
-
SHA512
5c98f8e2892f681073d7bb8b67f42d6369c5052fbaffc189c59317de39ce76294bdddde9fe09ffd10a81963db821d2be7c06924bbe9ad3b5936d64248342f564
-
SSDEEP
3072:7DOjBLxoC9PZUFfYS3azG0CG0jOMrqwsQwEFHO4LjH9YOAVF7NHJuMoVi:7aj1Sf7oQzjOM3SkLjH9YOCSM/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 765e53b7873cf667a9ba7e3b4e0f4edf
Files
-
765e53b7873cf667a9ba7e3b4e0f4edf.exe windows:5 windows x86 arch:x86
b900dc5ab09e702140c5c289f35fb91f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord6
ord17
kernel32
GetCommandLineW
OutputDebugStringW
RtlUnwind
WriteConsoleW
HeapReAlloc
SetFilePointerEx
LCMapStringW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetModuleHandleA
QueryPerformanceCounter
CloseHandle
CreateFileW
LoadLibraryExW
GetProcessHeap
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
LoadLibraryA
GetStdHandle
LocalFree
LocalAlloc
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetLastError
Sleep
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalAlloc
GetConsoleCP
WriteFile
FlushFileBuffers
DeleteCriticalSection
IsProcessorFeaturePresent
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
user32
TranslateAcceleratorA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
WaitForInputIdle
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextA
EndDialog
DialogBoxIndirectParamA
LoadIconA
LoadCursorA
FindWindowExA
FindWindowA
MessageBoxA
GetClientRect
SetForegroundWindow
DefWindowProcA
UpdateWindow
LoadAcceleratorsA
EnableWindow
SetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
gdi32
StartPage
EndDoc
StartDocA
SetMapMode
GetStockObject
GetDeviceCaps
DeleteDC
CreateDCA
EndPage
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteExA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text0 Size: 90KB - Virtual size: 89KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE