Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
7a381313efd489491cfe82600993bb494431f09d49dac5f0a2aead2b48278da5.exe
Resource
win10v2004-20240508-en
General
-
Target
7a381313efd489491cfe82600993bb494431f09d49dac5f0a2aead2b48278da5
-
Size
2.3MB
-
MD5
8ef606947391c0f39ee828e1b620de8c
-
SHA1
7a5572ab65838c3378dbc374964c4667bc11cfab
-
SHA256
7a381313efd489491cfe82600993bb494431f09d49dac5f0a2aead2b48278da5
-
SHA512
d498c3a764ba0761751ada38ee0616a8f5d234f7e67ee95d4bb3517b6cd5457e7ac9609e8a81bfa09bf80c03f97f64e45ab6e37c0c2f09bd79f057415f11e6b6
-
SSDEEP
49152:yMBrp99a6jKqHg/69HxpJ5cq/lNAjKl9jT/fQUsMeV:F5pGyKqHhH/H/6K7XfQUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a381313efd489491cfe82600993bb494431f09d49dac5f0a2aead2b48278da5
Files
-
7a381313efd489491cfe82600993bb494431f09d49dac5f0a2aead2b48278da5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
enmbskly Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ftfygpod Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE