Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
e24dd26925db61391a279370f6ee22e4d35ea0a13ca88ae7dae5a8def177832e.exe
Resource
win7-20240705-en
General
-
Target
e24dd26925db61391a279370f6ee22e4d35ea0a13ca88ae7dae5a8def177832e
-
Size
45KB
-
MD5
d713ae5b9cff7387e5a9363046db5caa
-
SHA1
70b052a2e2994cb8579e75d97607c2ff7a1095f4
-
SHA256
e24dd26925db61391a279370f6ee22e4d35ea0a13ca88ae7dae5a8def177832e
-
SHA512
b4c9f1b780e39224928f023b80d03a117d6e19670b3615fad4d9d7269d9b1397ed15e54c437a0b203b436869350fa59577482f05bed9274677733aa690463be7
-
SSDEEP
768:yuETKT0k3qXWUrV6e1mo2qyI3XqJthIf33OPI8zjbugXvipn5Wz8e/zX5iBDZqx:yuETKT0cE2/AXw2v383bRXKpn5WVcdqx
Malware Config
Extracted
asyncrat
0.5.8
giampiero
194.55.186.129:5000
NBzTELYY8p2o
-
delay
3
-
install
true
-
install_file
$77svchost.exe
-
install_folder
%AppData%
Signatures
Files
-
e24dd26925db61391a279370f6ee22e4d35ea0a13ca88ae7dae5a8def177832e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ