Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fd8f62d6d7b10884b640e716509e5ceacdd337f09a76d74dfdd177c7981385dc.exe
Resource
win10v2004-20240508-en
General
-
Target
fd8f62d6d7b10884b640e716509e5ceacdd337f09a76d74dfdd177c7981385dc
-
Size
365KB
-
MD5
a9afff3f9e5f1ef60e4155bb56f7801c
-
SHA1
a76f10bcb953c53629c6cef72fc7f5ec0e48fa1b
-
SHA256
fd8f62d6d7b10884b640e716509e5ceacdd337f09a76d74dfdd177c7981385dc
-
SHA512
1df802891744949b1a59cb443a0416a864f001cde90d39a54394aa4868f2f83014aefb25a3b9f3a60bb48bb0b06eb14c62a2e2bb20ab59ca05e535e5e6a09b79
-
SSDEEP
6144:PaX7EMN6qa0aDkM2fzyL8uD1OQma0Ow9bcip87002dK6:PM5NKPkM2fzg1OiFt7FyK6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8f62d6d7b10884b640e716509e5ceacdd337f09a76d74dfdd177c7981385dc
Files
-
fd8f62d6d7b10884b640e716509e5ceacdd337f09a76d74dfdd177c7981385dc.exe windows:5 windows x86 arch:x86
b4d20027d350bc9f50d33365892b0205
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
GetCommState
InterlockedDecrement
SetConsoleScreenBufferSize
GetModuleHandleW
GetProcessHeap
GetSystemTimes
GlobalAlloc
GetLocaleInfoW
lstrcpynW
IsBadWritePtr
SetCurrentDirectoryA
GetCurrentDirectoryW
SetLastError
GetProcAddress
BuildCommDCBW
LoadLibraryA
WriteConsoleA
SetFileApisToANSI
FindNextChangeNotification
FindAtomA
FreeEnvironmentStringsW
EnumDateFormatsW
GetSystemTime
SetFileAttributesW
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 38.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ