Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
15022024_2247_temp1502_02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15022024_2247_temp1502_02.exe
Resource
win10v2004-20231215-en
General
-
Target
15022024_2247_temp1502_02.bin
-
Size
103KB
-
MD5
949bcd2467d36403cff9c9736a8f7cf2
-
SHA1
e6bacd6b4c4d77ae7009a19663d766c0029b7b59
-
SHA256
de3b9f377e53fdc9962d2c2423f446ba9e46c3e4e577d8aeee592a15716085bb
-
SHA512
27cf881753abd93dae5070f731286a0418d4e379ee6c7ab00250ce141c6689596f40360076b1038891d91660c3720f0427e5e5ca932bb6261151234ffc4c7d93
-
SSDEEP
3072:B34CUVJOy/cTw+75hv7O41Y2n33rO/jm:B34CcOymhv7p33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15022024_2247_temp1502_02.bin
Files
-
15022024_2247_temp1502_02.bin.exe windows:5 windows x64 arch:x64
Password: infected
b547b1487151c8557bcbc6c24574ec6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE