Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
a2acaec8af78f8006dd9e1cdc25386cb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a2acaec8af78f8006dd9e1cdc25386cb.exe
Resource
win10v2004-20240221-en
General
-
Target
a2acaec8af78f8006dd9e1cdc25386cb
-
Size
77KB
-
MD5
a2acaec8af78f8006dd9e1cdc25386cb
-
SHA1
bcfc4cc6ebffdeda60db80285deb2b524f465754
-
SHA256
40afe593ca6820aa36d22672a13d4852df82f226665984ddb24ad551c888a3c6
-
SHA512
5b300525bd95601c70e32054b87ee3ca0c669923eaef3acdf71172ea901af3709c0ebb9cfd6778d8e6194a7cb62183fa67159e557e859cdf04612a32c7423fa0
-
SSDEEP
1536:NYTi/M/gy2fZaPVbD00OZb8WkuYZaRLYT1ebz+Ps:NYtIyZP9FOZbcaRMT1g+U
Malware Config
Signatures
-
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2acaec8af78f8006dd9e1cdc25386cb
Files
-
a2acaec8af78f8006dd9e1cdc25386cb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ