Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
abb6cc53dd225ca51a5bb4ad0ab89e2ad521ee2cc5f6d18438de1d46cdeda927N.exe
Resource
win7-20240903-en
General
-
Target
abb6cc53dd225ca51a5bb4ad0ab89e2ad521ee2cc5f6d18438de1d46cdeda927N
-
Size
85KB
-
MD5
5ec3debc78615064f8ceb86f01f63390
-
SHA1
b76868ae865b4f7bffb7909fc893b9121c7936c5
-
SHA256
abb6cc53dd225ca51a5bb4ad0ab89e2ad521ee2cc5f6d18438de1d46cdeda927
-
SHA512
040c15d5106bd66d60d164e0098756f1b22dc4f59590cd48f4137044fe755d00e249f1343b0c179e60b99895f0202d71f46e28b4e3eda9be969ab4d307b72bd4
-
SSDEEP
1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCtye:enaypQSoskW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abb6cc53dd225ca51a5bb4ad0ab89e2ad521ee2cc5f6d18438de1d46cdeda927N
Files
-
abb6cc53dd225ca51a5bb4ad0ab89e2ad521ee2cc5f6d18438de1d46cdeda927N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE