Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d.exe
Resource
win11-20240611-en
General
-
Target
c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d
-
Size
1.8MB
-
MD5
dc055f00148e6bdf3dfb821a495e7456
-
SHA1
d2a72cb1d50ba76e2dff13bdc81e11d2631efe25
-
SHA256
c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d
-
SHA512
5495a7d7ea9492fb06da64593fed1ddd99d0acbd0d248f1ece11abe5fea77f340c6f9014ef0fb2a4ede89f527e45b894d08f409f16f55c9b742b7f275e4f6606
-
SSDEEP
49152:C+zTSO4GCP0vi3D/gPfpR/Q0SrWzugQi2U4lkVVrb:C+zOPsvh5BSgu/in4lSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d
Files
-
c24f9d80e670d4169c613e292077e9c00ec2eecb21dac08f4fc60be23883b16d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iavfobpz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
apfgokjx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE