Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8.exe
Resource
win10v2004-20240802-en
General
-
Target
5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8
-
Size
210KB
-
MD5
c230453585bac11b9b1236057959a373
-
SHA1
0fc40bdd398d3595b1bd027c7cffb22d9ab8325a
-
SHA256
5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8
-
SHA512
03e8ce44f4194f22f2d0650f721900fc9567e8c32a071fd9c4062bb22559a892ec879aae9b737a5cd10933263f9bb3bd2a36b5c8885750b0c2ebf8d14fa90f08
-
SSDEEP
3072:6D3ZHz/kMhfXJsezq5hhAQwgmtdxxBG30kYhvvvvvvvjx2DAHD1v8S1QxA:2/ZXNWjm73o30fCOt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8
Files
-
5a4279f2e9db30729d1b26ca2325ca4e6fcbe2a4c54a1145f463a91a0fcab9c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE