Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
BE6C6950834D40DB4E6DC2EFF56A914CD76062E23C361F87F55A8CA8AFFFD86F.exe
Resource
win7-20240704-en
General
-
Target
BE6C6950834D40DB4E6DC2EFF56A914CD76062E23C361F87F55A8CA8AFFFD86F.exe
-
Size
175KB
-
MD5
9e31bf43798ffd4d029c94caff29023e
-
SHA1
d96e79d2bd84ec6ce72d5195cd7cb55ac5db2e68
-
SHA256
6aa9785c788205916c58c12be189e23101c3b8137e08a851061968d6e1826b59
-
SHA512
8ad8bec5075be1e803724d1d962b2f99badb96b94f992c2005c5fb5e389af6378450b624c21c940579140b6b5a34b4587645be7035f031125b3b93252e4d124a
-
SSDEEP
3072:K/E8k9V0JIYmDdMh1+foxoSaS4eH53U/tV+FNb8EGBGCH:K/E8k9SgD6/Tmb/r+Fp8EG0
Malware Config
Extracted
arkei
Default
62.3.12.9/oCWKaZ5eh7.php
Signatures
-
Arkei family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BE6C6950834D40DB4E6DC2EFF56A914CD76062E23C361F87F55A8CA8AFFFD86F.exe
Files
-
BE6C6950834D40DB4E6DC2EFF56A914CD76062E23C361F87F55A8CA8AFFFD86F.exe.exe windows:5 windows x86 arch:x86
4e06c011d59529bff8e1f1c88254b928
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_mbsstr
memset
_mbsnbcpy
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
#�h��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE