Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
aitstatic.exe
Resource
win11-20240709-en
General
-
Target
aitstatic.rar
-
Size
62KB
-
MD5
34eab96072e8c3e51aec8b750a981103
-
SHA1
f89745ef4b1f5b6103d62c1ff6d312a9c2e8cb4d
-
SHA256
25d8056c1359d49a58ee002ee700f2258250ed896024446f6513a7ec1c078cbc
-
SHA512
635e0ce33982f8d6f0a39ecd711701d3cd0a6e2adf9ec43b90cde0fd005e6df2ef2ef1b20b94efceb7a922260ac06a2db1f623e9fbd2b0ac65776dd5bad2a539
-
SSDEEP
1536:yIBVw0rPUIAnSsQ1ub93a/iencU6S/mp+WOMDKw/P:1y2bO5QsVa6+cjMCLDF/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aitstatic.exe
Files
-
aitstatic.rar.rar
Password: qwerty
-
aitstatic.exe.exe windows:4 windows x86 arch:x86
Password: qwerty
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ