Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
121f61ebfff0c27ee2a9df12e2d27e1908c8b895b7c80083be925498216d4c47.exe
Resource
win7-20240708-en
General
-
Target
a0992ed732b9ff9ede1ea7110b093d56.zip
-
Size
368KB
-
MD5
a6850ae5e494137319df2c52857b5d04
-
SHA1
b15f1f830b22656f1c7c2e45e09dfc90fa62d3a9
-
SHA256
129c669a3f8e9bda981cd49ae12831176cedfcf1d6105f7c76825a62d22a2924
-
SHA512
4ae9fc4897aa0be29780c91b3059e7bb1a3fd734c23c1dafa95ecec94aa0713d7eb5e49d685b89b9fe06c8b3ddb8ecac070dea68e06d4d808ece071f05f96a56
-
SSDEEP
6144:MiL7JxJ4Bw6RX3v84JBuvc+LJ2SVW3Vg/E+sQshVvbIdq524Oy8sUv4oCmpmZFPi:Rulh/84JB5+1dVW3VwvW5s4OyegoCmYI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/121f61ebfff0c27ee2a9df12e2d27e1908c8b895b7c80083be925498216d4c47
Files
-
a0992ed732b9ff9ede1ea7110b093d56.zip.zip
Password: infected
-
121f61ebfff0c27ee2a9df12e2d27e1908c8b895b7c80083be925498216d4c47.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ