Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
d4417b23f8728ae97d162dcb9916ad36aac089a2dd684936884f013bd50f49edN.exe
Resource
win7-20241010-en
General
-
Target
d4417b23f8728ae97d162dcb9916ad36aac089a2dd684936884f013bd50f49edN
-
Size
1.8MB
-
MD5
4264eccf5968410db0afcf14351fc8e0
-
SHA1
b0dcc6ccd68005534f9a7172c5d9e1d510d42de3
-
SHA256
d4417b23f8728ae97d162dcb9916ad36aac089a2dd684936884f013bd50f49ed
-
SHA512
2aa4dae701bd619e7d2befe3365faf671dfd1c458510603e5742baccc21ebb600f67d71e3181f76333401b5c581150b1420e9a7c9ead54ad8ad8f0e2fded7b0c
-
SSDEEP
49152:BOvzK7kxWcm+/SOsV1z5ujABwJmPZmWQMaROW8ywP:By+7cW6+kABwTXOd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4417b23f8728ae97d162dcb9916ad36aac089a2dd684936884f013bd50f49edN
Files
-
d4417b23f8728ae97d162dcb9916ad36aac089a2dd684936884f013bd50f49edN.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
febftsfn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dcycmmut Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE