Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
b3134b8f71f46383e41369815ae4d65e51dcae524582ab69ed87a791fc48823aN.exe
Resource
win7-20240903-en
General
-
Target
b3134b8f71f46383e41369815ae4d65e51dcae524582ab69ed87a791fc48823aN
-
Size
91KB
-
MD5
4378bcd698d73904609a915e431ff970
-
SHA1
23a4e49cd4ecae4904975221f4e80d31ae8b0223
-
SHA256
b3134b8f71f46383e41369815ae4d65e51dcae524582ab69ed87a791fc48823a
-
SHA512
f605289c0f7305c529b748c82777b1b8de29f0dcef5f8703e992dbace44bf0281465610bf6491addfc738d28ddda3008aee57841bf0b45cdd19f643319e71d26
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/bX3f:KQSo7ZgrDf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource b3134b8f71f46383e41369815ae4d65e51dcae524582ab69ed87a791fc48823aN unpack001/out.upx
Files
-
b3134b8f71f46383e41369815ae4d65e51dcae524582ab69ed87a791fc48823aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ