Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77N.exe
Resource
win10v2004-20240802-en
General
-
Target
405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77N
-
Size
34KB
-
MD5
ecfa895afaf344e90ea5bc2fe3c37700
-
SHA1
d9d643073b4089ded6505ac8f6f283fbf4271adb
-
SHA256
405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77
-
SHA512
706ae69f69af2d538442cdd01c84ea20e5a02108559c7ba2de9ef5f6a929b5eee3c19399775220b721eef08a288ef3c83a96c0c12382513da83d75197a094449
-
SSDEEP
768:F22jpAzhjQo8hR/4cxgBLrjyP2/yWBMQo1afeTE5sT9M3jPEa:IYiJLrjyey6eM5sTOTr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77N
Files
-
405711995f6a3c1eb78b121f91b769509fe69fb216a6e7115f416327c3b4bd77N.exe windows:4 windows x86 arch:x86
af29b7ed5feabea0ce434322fdf2f92d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetProcessHeap
LoadLibraryA
HeapAlloc
user32
OpenClipboard
UpdateWindow
GetClassWord
gdi32
TextOutA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ