Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb.exe
Resource
win10v2004-20240226-en
General
-
Target
5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb
-
Size
468KB
-
MD5
883f55d9e1da68bf5bc0a05c679d0a8b
-
SHA1
5d9fc45aa719b4268688281e116aa49e3e289c74
-
SHA256
5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb
-
SHA512
3eb558b2762ff2c156c411b80ad8e1fc00c7f237cf0b062e23c319e68bcf00e9c7c1e98d06de800797563826703044a20d73af17571c03724822555a8798ae02
-
SSDEEP
12288:rhSBH928uaXDhBlFApCML4LXBf7TZghul8MN3dEsq:FW9HrTjiLMvghulnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb
Files
-
5e9b0301f94bd49cd95c9bc077066f1676421891b2193d5e9b38dba24c20aafb.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ