RqYh.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f34fd6a0b6536f074e3a1bc41f0e35a80667688de9668cd1d75f6920a06e7607.exe
Resource
win7-20240705-en
General
-
Target
4b487f91d2504883b4c9df18848af5ef.bin
-
Size
891KB
-
MD5
779559ac3b1cbd82a2b01991f87a8f08
-
SHA1
3da3da722808a6fd4929b1ed73482e8075e77c62
-
SHA256
c3bd1eaa3e042bd0948cfdec06cae89031e5437f14ecc65e4a449a44e7c296ed
-
SHA512
0a369ec43b58745027435478b76ef9c2d867d0eb668034e525100e26ec2a92c2ce0c347b2e2d35fe4061aca30a9557fa2bf318aee49e7907ea05c77be964f319
-
SSDEEP
24576:vnJmajG4w+3U/fokFcsFKzo3PaqQM0NIUk75IYX:PgP0U/Ln+o3PF+E5IYX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f34fd6a0b6536f074e3a1bc41f0e35a80667688de9668cd1d75f6920a06e7607.exe
Files
-
4b487f91d2504883b4c9df18848af5ef.bin.zip
Password: infected
-
f34fd6a0b6536f074e3a1bc41f0e35a80667688de9668cd1d75f6920a06e7607.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 966KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ