entry
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ffcafc13cf1f83295c57b5a0b168d19e506ab4141b6e2eb9b9fcc121e7ef6dc9.dll
Resource
win10v2004-20240709-en
General
-
Target
ffcafc13cf1f83295c57b5a0b168d19e506ab4141b6e2eb9b9fcc121e7ef6dc9
-
Size
124KB
-
MD5
ceb6a0f893604fb594787d0d73c6fd86
-
SHA1
0e06c0c77610b1f8237faf7338111ad2ab433bc3
-
SHA256
ffcafc13cf1f83295c57b5a0b168d19e506ab4141b6e2eb9b9fcc121e7ef6dc9
-
SHA512
c7a75b12828aaaebd117a02913626b9cdc25e8c711cd1681bd6446ffe3f05cbb05fb32a0bd3543b98e6872f2a04e4e1571653dc1e1f5dc9a9eb6319809035ea9
-
SSDEEP
3072:49IiHF8NStJ3EeGsOFQeN0wiCCwZB1CSzANVC+mqDcZ+oEc:4Guqe0XXBbAXC+mqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffcafc13cf1f83295c57b5a0b168d19e506ab4141b6e2eb9b9fcc121e7ef6dc9
Files
-
ffcafc13cf1f83295c57b5a0b168d19e506ab4141b6e2eb9b9fcc121e7ef6dc9.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ