Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
01022024_2134_wkldr_s2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01022024_2134_wkldr_s2.exe
Resource
win10v2004-20231222-en
General
-
Target
01022024_2134_wkldr_s2.bin
-
Size
101KB
-
MD5
76b14ca3b3d43d16563b4c06f3645ef3
-
SHA1
9af64f5d5b9a918ebae6074200b37c7ff1369580
-
SHA256
34f5759b0e7604dfcc245643aabdac6e24deb01976ee6b0a33b56ac50569c31f
-
SHA512
e7659ede8fe819ad527edbf5ed96985b181f2b488f8638aa0fbdb0c3e26ae20784f8308ea0a7b358983e548da086628a4fc741cb91f0c567727a77f8f1c41ac5
-
SSDEEP
3072:Tje2jdA5l+AtDCzGTGW3hevBm3DC5a7tG44x0iNVr5L+omPqUbb5HvT:Tje2jK5lLZCzbugBCux7PI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01022024_2134_wkldr_s2.bin
Files
-
01022024_2134_wkldr_s2.bin.exe windows:5 windows x64 arch:x64
Password: infected
b547b1487151c8557bcbc6c24574ec6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE