Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d2c6db1f512a1e29692d93042eb7ba85.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d2c6db1f512a1e29692d93042eb7ba85.exe
Resource
win10v2004-20240802-en
General
-
Target
d2c6db1f512a1e29692d93042eb7ba85.exe
-
Size
214KB
-
MD5
d2c6db1f512a1e29692d93042eb7ba85
-
SHA1
80e966bfd4900655480f9575d378c5bfa6ffe6ae
-
SHA256
3c6f52ed5ece2b8eedbc3ead6cd78c8656a3ed278a510527d3af368206ea2171
-
SHA512
deffa135d3d7f1896e00a6f851c34fb34fbb0e95415d51a7dc1a3352aaf19bbeb4c44f35cc4f6cac254564f3118f296b3abd677fae76af3c4c3877a3c6163c5f
-
SSDEEP
3072:nyxvdrLtwBBjbvPQIBXU7ImEcuVJ8IP27YE5Xh3c:ovdOvbvPI7F+J4v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2c6db1f512a1e29692d93042eb7ba85.exe
Files
-
d2c6db1f512a1e29692d93042eb7ba85.exe.exe windows:5 windows x86 arch:x86
61cf914348cb901069f2777bc6ad92c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
LocalCompact
FindCloseChangeNotification
UnlockFile
GetTimeFormatA
GetModuleHandleW
FormatMessageA
GetDateFormatA
GetSystemTimes
GetProcessTimes
GlobalAlloc
SetFileShortNameW
LoadLibraryW
InitAtomTable
GetFileAttributesA
HeapCreate
GetShortPathNameA
GetLastError
GetProcAddress
HeapUnlock
GetNumaHighestNodeNumber
LoadLibraryA
InterlockedExchangeAdd
GetCommMask
OpenJobObjectW
FoldStringA
EnumDateFormatsA
lstrcatW
FreeEnvironmentStringsW
VirtualProtect
GetConsoleCursorInfo
FindAtomW
DebugBreak
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
ReadFile
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
CreateFileA
CloseHandle
RaiseException
user32
LoadIconA
ole32
CoTaskMemAlloc
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ