Entry
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2.dll
Resource
win7-20240903-en
General
-
Target
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2
-
Size
403KB
-
MD5
e3506a7208ba1d4dad6c15a9cb202d5c
-
SHA1
672df8c9f5a4127ee1718ced34dab7bd9e80dedd
-
SHA256
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2
-
SHA512
87e459bfb5e1d7ad1781ee78e18ecb9c128f3565be3e1869233032cb11c05c29b5084924bfa95556d00543a5b2aec8115e85ef8b9ec6e9776376c8bcf1344024
-
SSDEEP
12288:Csa+X85sqbRs0+6396W58J1PUchg1nNccj:6+X8H36uW61Ncc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2
Files
-
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ