Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90N.exe
Resource
win10v2004-20240802-en
General
-
Target
3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90N
-
Size
352KB
-
MD5
e5e852a087fa924df31a219485b47580
-
SHA1
8938684edc2b802284b00f69c03fbf0f179de116
-
SHA256
3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90
-
SHA512
cc14383d50e1dbc83b43891b94881e88b2dc6c7d88e2cd1fdd5c5d13eb22cc321d11a04510c7dc9ae68febbae8783985cfff29158e75ff97700ffeb26e40f255
-
SSDEEP
6144:MtVFqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeYvNP82qU:XWDQcShyGloFjbTA1KmNo/VF9V02t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90N
Files
-
3cb9873aa527a590d269ef9755b2f01a31e653bac0f34d0512423b9c7f9fab90N.exe windows:4 windows x86 arch:x86
35a04762116f8e152f889087a5de9689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LocalFree
GlobalLock
CreateEventA
FreeEnvironmentStringsA
OpenMutexA
IsBadReadPtr
OpenSemaphoreA
GlobalUnlock
lstrlenA
GetACP
CloseHandle
ResumeThread
LoadLibraryExA
FreeConsole
VirtualProtectEx
FindClose
GetSystemTime
GetStdHandle
GetLastError
user32
GetComboBoxInfo
CreateWindowExA
LoadCursorA
SetFocus
GetMessageA
DialogBoxParamA
ClipCursor
IsIconic
GetSubMenu
GetDlgItemTextA
EndDialog
IsMenu
GetMessageA
MessageBoxA
msasn1
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncNull
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ