Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
setup2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
setup2.exe
Resource
win10v2004-20240802-en
General
-
Target
setup2.exe
-
Size
227KB
-
MD5
0f11d18a5a7c0ec929e6afec9d39e9fd
-
SHA1
d1b0177a323a00e0c83769e25b7d9a5cc651c282
-
SHA256
5fca3f761720e032add8169fe99c64d9de874db06d5994c4f124de98d2af4d35
-
SHA512
cec2f196f898b5060877c31abc874fd4e08b096c592dc5abc6ef57a4de20c2e8d1f66024dd4b5f12ef85da208112685db5bbf77828f1bc0b09c7eb4f7f84b916
-
SSDEEP
3072:5dHfJpRiwr7B0dlrMgqYwLP9KSzylmU2JsHhp:5dHfJpRiwnOdl4gwDUkyzYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource setup2.exe
Files
-
setup2.exe.exe windows:5 windows x86 arch:x86
310f529f7ceda238fd1a8dcd68dc8454
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
GetNumaNodeProcessorMask
GetDefaultCommConfigW
GetConsoleAliasExesLengthA
WriteConsoleOutputW
InterlockedDecrement
GlobalSize
GetEnvironmentStringsW
GetComputerNameW
CallNamedPipeW
GetModuleHandleW
GetConsoleAliasesLengthA
GetUserDefaultLangID
GetCommandLineA
GetSystemTimes
GlobalAlloc
LoadLibraryW
HeapDestroy
LeaveCriticalSection
GlobalFlags
SetConsoleMode
CreateDirectoryA
GetConsoleAliasesW
InterlockedExchange
GetStartupInfoA
GetLastError
GetProcAddress
SetStdHandle
SearchPathA
GetNumaHighestNodeNumber
LoadLibraryA
QueryDosDeviceW
FindNextChangeNotification
FindAtomA
FoldStringW
GetModuleFileNameA
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
HeapAlloc
EncodePointer
DecodePointer
MultiByteToWideChar
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
Sleep
HeapSize
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
HeapReAlloc
RtlUnwind
LCMapStringW
GetStringTypeW
HeapFree
IsProcessorFeaturePresent
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ