entry
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0da8320b76ee3edced30f025c9235600N.dll
Resource
win7-20240705-en
General
-
Target
0da8320b76ee3edced30f025c9235600N.exe
-
Size
124KB
-
MD5
0da8320b76ee3edced30f025c9235600
-
SHA1
fd64b4c45078737c82317026616d5afa3dd86fd3
-
SHA256
54d36f30a09d2733b43ad10e7821c36b05e1a20d4d0ab170b6a8afe7c502412d
-
SHA512
d172e3af179bfb7c668143ad52f1874e614bb4d1b80c673f63e8e2c450cf0b6b583038f28a66b51ba42245aed47385873345f1e96257471001061b4af4b57618
-
SSDEEP
1536:HA+yHYbEbRI1aVsnxkW39nT5Ng8snVcrn91ilTDU0ZzN1E4BlQ9POSahx7:HNyfwaaKOdgsjrilDbzNrBlQ9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da8320b76ee3edced30f025c9235600N.exe
Files
-
0da8320b76ee3edced30f025c9235600N.exe.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ