FGGX.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
SOMGAZ PO NO6200125011.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SOMGAZ PO NO6200125011.exe
Resource
win10v2004-20231215-en
General
-
Target
SOMGAZ PO NO6200125011.exe
-
Size
733KB
-
MD5
1128c941c31bf5c69a05b8ea81f01f43
-
SHA1
1426e216a1ae8a787104162228ba223feb6940e3
-
SHA256
ee57b6fa1e5a3c5ef776b79f32820327bcb3fe1974eeddf65c0eb56131193397
-
SHA512
7bdb8cf37a4d6dd5554bea5f96ae072fd3d72f8f7357bfa32d09c28a9f8bb193b98398deea2e79ee539b9c3c6fc806cae8b28a5223456c442d21025dd966e68e
-
SSDEEP
12288:/qBVN+10VUZVz7NB8OhlGdVWelWIy4Y+:/qsBZVfwOhwdQxIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SOMGAZ PO NO6200125011.exe
Files
-
SOMGAZ PO NO6200125011.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ