Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
9ae617395ad5440f6774902b04f331a59282737d0f3c897d9f21ab73c19b691e.exe
Resource
win7-20240508-en
General
-
Target
85b0f825ec9f8661f2b1237a0e33ad06.bin
-
Size
2.3MB
-
MD5
e94c68a897646b7f0f2c2d548e2198a4
-
SHA1
3846e9ac23df53e2d241b5283c387d00338c7d23
-
SHA256
174ed2482913c1f30af42004873d44a071ce08acb7d0cb7e2748e4aa32553811
-
SHA512
32daee42d25cf20f812a11182b86114e32bfd175752a92ec1784b877f5642501cb5c4cf9d64a5657192598452a6a4ff82e5d639b6236ffd0eb72230279f3986b
-
SSDEEP
49152:rgqqm7KR9QiRo4tW3IKE1SZKOzeHU0SP45e8MZE2yh4:c71RjRoU1OzIBP5IExh4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9ae617395ad5440f6774902b04f331a59282737d0f3c897d9f21ab73c19b691e.exe
Files
-
85b0f825ec9f8661f2b1237a0e33ad06.bin.zip
Password: infected
-
9ae617395ad5440f6774902b04f331a59282737d0f3c897d9f21ab73c19b691e.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kwsiocfo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhfhiasa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE