jHU.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0156a3553f9c3a0d318e5efec95727c2a0111f19478eeaec9a320b5c35b400bb.exe
Resource
win7-20240903-en
General
-
Target
0156a3553f9c3a0d318e5efec95727c2a0111f19478eeaec9a320b5c35b400bb
-
Size
886KB
-
MD5
62e05250eba4182d8be9d3178a02a7ae
-
SHA1
007ecff53265d7e42d67ee8eddde2c542958549b
-
SHA256
0156a3553f9c3a0d318e5efec95727c2a0111f19478eeaec9a320b5c35b400bb
-
SHA512
e197be0faafdbfe68d96cc802ade148da328396f9b000cb3f39fecb7d42621542b5f63223c4f79cc27323267eb702b8efa5a0930e0e599079d3551225bf9c0c7
-
SSDEEP
12288:giF7s9IwFSqU8V1RNxuH1ifXrvcejYJTsiFscX6viyRSbZMYOHhK4+:giF7s9IWSqnxq6NUbnXoUbZMYQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0156a3553f9c3a0d318e5efec95727c2a0111f19478eeaec9a320b5c35b400bb
Files
-
0156a3553f9c3a0d318e5efec95727c2a0111f19478eeaec9a320b5c35b400bb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ