Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2acb4f9298ffd24c281b1c897788fba7b6d1d95d8e6e7c7c1ec18aecbda92147.exe
Resource
win7-20240903-en
General
-
Target
018116eae1d31c0b4ea252f45e266bee71a916715e023422b19ddc01413a8139
-
Size
699KB
-
MD5
faed7cffab128ddcc5cc2be62ca54999
-
SHA1
b9d6c84619c59230fe214853d0751a32e54bb15b
-
SHA256
018116eae1d31c0b4ea252f45e266bee71a916715e023422b19ddc01413a8139
-
SHA512
ebc588157c2d865fcd890f738903dd0c9c23c267e3f639ea79676e16d0d03772effc0e9d7b0ea40d61edd4f897a5d655ff74520b0df4817710fe6dddb417f88f
-
SSDEEP
12288:P3wIWvj/bGQleP60MvqEfN7ecx3JLDxxw3JPJdq6AQ+jZF6Ll94kYcpUF60iKqnE:PKb/bGmS6RvXfNNVLwZxdq6f+Xo7g6L2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2acb4f9298ffd24c281b1c897788fba7b6d1d95d8e6e7c7c1ec18aecbda92147
Files
-
018116eae1d31c0b4ea252f45e266bee71a916715e023422b19ddc01413a8139.zip
Password: infected
-
2acb4f9298ffd24c281b1c897788fba7b6d1d95d8e6e7c7c1ec18aecbda92147.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 724KB - Virtual size: 723KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ