Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
977ce1ef29b147ac14519b3077ff04bb583cf370614cc3f7f69e794ba82087d4N.exe
Resource
win7-20240903-en
General
-
Target
977ce1ef29b147ac14519b3077ff04bb583cf370614cc3f7f69e794ba82087d4N
-
Size
110KB
-
MD5
ad2948036226162a59dc834bc1e14d60
-
SHA1
8c7ad8bfab90cb7c1d154ceb7718009207caa62a
-
SHA256
977ce1ef29b147ac14519b3077ff04bb583cf370614cc3f7f69e794ba82087d4
-
SHA512
75a811ad021e50e55aacdf4b689358af4ee93fbd03274cd58a1c6561f4bbd0a24dbe5964873d171c210c131c8c0afaaa4c315ec59762fc704cad14d1a61e1159
-
SSDEEP
1536:IiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:IiyvRmDLs/ZrwWJjAqGcRJ2hg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 977ce1ef29b147ac14519b3077ff04bb583cf370614cc3f7f69e794ba82087d4N
Files
-
977ce1ef29b147ac14519b3077ff04bb583cf370614cc3f7f69e794ba82087d4N.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE