Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6cN.exe
Resource
win10v2004-20240802-en
General
-
Target
84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6cN
-
Size
655KB
-
MD5
7d50e7273be9dd043969728c2b947910
-
SHA1
0cebec982df7a06988f28bae303a90527a7300b4
-
SHA256
84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6c
-
SHA512
cff0030c75f009d0459b4cc80ee7a35ef84bb5a14c5d7d26d346251723ebec4459fd372af05bc057fc355376e15d578de82fc41cd621b4357e4fde4af8e902b8
-
SSDEEP
12288:SKg71yAoHNWR8bTH7MrcuWE/wove/j24yu/ATnZuPESLnV+pFq:1HNJDMor12mquPZjqs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6cN
Files
-
84c0dea17d6e688a1ac18f7025e544a32b7c701ae8ac20f0b5f6d38ce8d9dd6cN.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE