Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c.exe
Resource
win10v2004-20240802-en
General
-
Target
bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c
-
Size
959KB
-
MD5
88512d09561c3b6f56c2ecc25f958ce3
-
SHA1
ed3b23a3b42e034b073c0a13cc4844e0d3b2efae
-
SHA256
bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c
-
SHA512
3fcce4752aba7a04e171739bcad8508c6705972f47ac1634ff8c06b35bb9d9bfb555c850dd7e9493537cbc1de42cd78e44cc95987bfaec294cfd6e54443b01ba
-
SSDEEP
24576:uLjr3s2nScu1i1tz3f++5kRzFxk7rMxNeR1R9qpdoF:Ujrc2So1Ff+B3k796+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c
Files
-
bd657bcb50a6bb0b2af8366477ff1037638fc0b89276fded348e86ee7f9c5d9c.exe windows:5 windows x86 arch:x86
216df81b1ef7bc2aa8ec52bbeef137c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAppendW
activeds
ord9
ord15
kernel32
CreateProcessW
GetSystemTime
lstrlenW
LocalFree
advapi32
CheckTokenMembership
CreateWellKnownSid
ole32
CoCreateInstance
CoSetProxyBlanket
Sections
.text Size: 896KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 470B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ