Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738cN.exe
Resource
win10v2004-20240802-en
General
-
Target
ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738cN
-
Size
1.1MB
-
MD5
50f0b2aaf6cbcbe1af4d601b47350ee0
-
SHA1
30dc73d7ba6983db388df1308f745f8b0dcc93d2
-
SHA256
ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738c
-
SHA512
ac12d953575ab31fe5a7eccc87b10ba5d11fcf2fb718d8b3c5e7b15d1171bb3d0fb03bb8b43db83ed1e5d990373c64995e1a9367107e496ca0563fb4609802d4
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1WNQojmzLLzevg1tN39mWwqxWj6I:7JZoQrbTFZY1WNQJ/n9oWdWj9
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738cN
Files
-
ac3b160870b52f929b70cef1bbd2a1c2532bcb2629049d5adb958fc969df738cN.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ