Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410.exe
Resource
win10v2004-20231215-en
General
-
Target
a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410
-
Size
7.0MB
-
MD5
b07ad1065683d5454d682075aa8ca203
-
SHA1
f2ecd1b049add1c6643df5ea24e8822e09d5e747
-
SHA256
a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410
-
SHA512
d5cfe210403f57f21cede03bc812698cf7e97175cdeb97f5ec15b0e677b8bb8f67e603331fb44ea7f84ebfc934d97a3215e9b2898a3080201a5f2bb48503ddbc
-
SSDEEP
196608:SKR98IZZP1qL15kHpQsNRmlmr5wX0JalvLi782sWl+jFL:/Rxn1qL1GHpQs9wkKi7Zq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410
Files
-
a4cb2553c82a565024769aca15e166cbf6b7f43b71c86c0b2c9df51ca6a5e410.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23.7MB - Virtual size: 23.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE