Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
737bba8d3e9ad3e1526bf5949962af3b37107c80c767c473a820999eae507fbc.exe
Resource
win7-20240221-en
General
-
Target
2784277bd68152abf75c6c6d59fab7af.bin
-
Size
2.3MB
-
MD5
6289fc334a891dafe795b29a6ab0651e
-
SHA1
c8455171cf69b5d788a49027999e647e99de8784
-
SHA256
f7f0d4807d0f122eb51a61e3e3899f141a0cbd89c51515dd6216053df160fa9c
-
SHA512
efeebc73a253107821971efa3e999fa5227e544833ac980a5b8988ee2246cb38db69439dce6508ec34f09e9919995a4282bf18bd5ad1cba081c255fb81e88dc3
-
SSDEEP
49152:7HY7ZV4HSlHLySg9UBnUppNKDT0yUl/a10CnAulo8dq7gS:7HY7ZqQeD9U4KDIHmrJqkS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/737bba8d3e9ad3e1526bf5949962af3b37107c80c767c473a820999eae507fbc.exe
Files
-
2784277bd68152abf75c6c6d59fab7af.bin.zip
Password: infected
-
737bba8d3e9ad3e1526bf5949962af3b37107c80c767c473a820999eae507fbc.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ