Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe
Resource
win10v2004-20240802-en
General
-
Target
763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
-
Size
282KB
-
MD5
0106f9ef84b12c021f6162c4cea235e5
-
SHA1
0f578daf6f177b51afc70773611f2c55b5d5ee8e
-
SHA256
763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
-
SHA512
83532853972d39a0c086de6d1b53e803103603f0a330d43d66eaa2ee2fd7a416399578502305fe1818e3147cd50944226b4b20eb86696139f1939003385b2d2f
-
SSDEEP
6144:xFOxlraju/txlKb0kNDBfFrX3HXYWgHe:6frDnkNRFT0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58
Files
-
763d6fea1f323f4b46659945bcbb1b003474141cbcc845401cb00cacb9fc5f58.exe windows:5 windows x86 arch:x86
89b57b3bddbd2bff3c8134c8b08a765f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommState
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
InterlockedCompareExchange
SetVolumeMountPointW
GetModuleHandleW
CreateNamedPipeW
FindNextVolumeMountPointA
GetNumberFormatA
CreateActCtxW
TlsSetValue
SetFileShortNameW
LoadLibraryW
LocalShrink
GetLocaleInfoW
GetCalendarInfoA
SetConsoleCP
GetFileAttributesW
GetModuleFileNameW
GetShortPathNameA
CreateJobObjectA
LCMapStringA
VerifyVersionInfoW
InterlockedExchange
GlobalUnfix
GetLastError
SetLastError
GetProcAddress
EnumSystemCodePagesW
GetConsoleDisplayMode
SetComputerNameA
LoadModule
SetThreadPriorityBoost
GetConsoleAliasExesLengthA
LocalAlloc
GetFileType
CreateFileMappingW
CreateHardLinkW
GetNumberFormatW
CreateEventW
FoldStringA
SetEnvironmentVariableA
EnumDateFormatsA
GetProcessShutdownParameters
LoadLibraryExA
VirtualProtect
GetCurrentDirectoryA
GetFileTime
OpenEventW
PeekConsoleInputA
SetCalendarInfoA
GetVersionExA
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DebugBreak
GetTempPathA
EnumCalendarInfoExA
CommConfigDialogW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetStringTypeW
LCMapStringW
SetEndOfFile
GetConsoleAliasExesA
EnumCalendarInfoA
GlobalMemoryStatus
SetDefaultCommConfigA
WideCharToMultiByte
HeapFree
HeapAlloc
MultiByteToWideChar
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsFree
GetCurrentThreadId
Sleep
HeapSize
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
user32
CharUpperA
SetCaretPos
LoadMenuA
GetMenuStringW
GetWindowLongW
InsertMenuItemW
GetMenu
DrawStateW
gdi32
GetCharWidthFloatA
CreateDCA
GetCharWidth32A
GetTextMetricsA
GetBkMode
ole32
CoUnmarshalHresult
Sections
.text Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 32.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kuvaluv Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yepil Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kemex Size: 1024B - Virtual size: 923B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dalep Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ