entry
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b.dll
Resource
win10v2004-20240709-en
General
-
Target
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b
-
Size
124KB
-
MD5
4b5bb1d43f9af502a19d49074e1a5f5e
-
SHA1
a18621d7ea610da81abb5d0e69337765e55e0129
-
SHA256
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b
-
SHA512
226910a9c8c13ea05a328cb27d70cf7f977f48f32a999b2d7b764ce51ba7cc6c39a6ef8870b6a01f0346eb0f541ad5cae71b9215f0c73c9167196a42db239699
-
SSDEEP
1536:bz14jmvQqJHSmkGPcVX+U1r7lqex9aRSuoLpK4zRgbFPm6zwsQw0rgKPe0eXfMae:bKjmv3xEX+U1rBq4a0fpJziM4wsQpm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b
Files
-
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ