Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e6524526950e9fca8f5a7d001a678ca62cca94ff03491e8d45d58df263d6381a.exe
Resource
win7-20240708-en
General
-
Target
233f648404abf3a913b830957f8bd1d5.bin
-
Size
1.5MB
-
MD5
1833ff25ae8b4b9de4c11b5d9123aa2e
-
SHA1
e3f269c3dab571fd72071f8932aaf20895670dcd
-
SHA256
8eda69ccee128f6c142da138f5e32d5724660c968eac8224ad68c591236a281c
-
SHA512
f8cc371b61258d7ac97da08e9ef9dcef5c80c1d820020a85edb894bf759586630c54ab8f3c9ef077df2437bd4e0bd8d23b0721d2db53869a034779b8d72a21d6
-
SSDEEP
24576:4jDXOtwTVUL0GV9zHNvNGSSLol6qCb9keKuv7Fbzcz+WxULoO2RZFEoqbJwQ:4jbFUJfrGSSElLC1v79SnqmFEZbuQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e6524526950e9fca8f5a7d001a678ca62cca94ff03491e8d45d58df263d6381a.exe
Files
-
233f648404abf3a913b830957f8bd1d5.bin.zip
Password: infected
-
e6524526950e9fca8f5a7d001a678ca62cca94ff03491e8d45d58df263d6381a.exe.exe windows:4 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ltpebbsj Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pvctuhhq Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE