Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
441093812c61d7d3698c2f3288a0b8e24e9082799c078e09b284f2a656a241ae.exe
Resource
win7-20240729-en
General
-
Target
db3661bd4ea32a52f0b42d59a4b320b1292cc1645ebb282b3bd15f81a17d62f0
-
Size
390KB
-
MD5
ecd661c1e56d9ca6ed8cf46fcb7c4fe9
-
SHA1
b1bae4e6b4218f1b672cd2a7e52d1319ec02a0be
-
SHA256
db3661bd4ea32a52f0b42d59a4b320b1292cc1645ebb282b3bd15f81a17d62f0
-
SHA512
c2cebe49c7e92f3d09f7d1f1ec0d65f43d84257a55126d5b96d4cb27159e3e4d012648ba5a68ee1b2123ad53bb81a98422394d752e292c8d9703fc70a07fde1d
-
SSDEEP
12288:HL8VhmHuvuJuhmgh+iRIkVqo91YQqJmay:r8rmHuAuhPjRwo91YbJmT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/441093812c61d7d3698c2f3288a0b8e24e9082799c078e09b284f2a656a241ae
Files
-
db3661bd4ea32a52f0b42d59a4b320b1292cc1645ebb282b3bd15f81a17d62f0.zip
Password: infected
-
441093812c61d7d3698c2f3288a0b8e24e9082799c078e09b284f2a656a241ae.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ