Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
SHIPPING DOC CICOOPLBL.exe
Resource
win7-20241010-en
General
-
Target
d05f54ffa289cf6eb2fd3f34ad3efc5d6dcd9c8bc305edac5cb4738bde1852a9
-
Size
383KB
-
MD5
26f8f90913ddb1c295931a8471a3a6fe
-
SHA1
7745d789dd5f4ba545f0f5b915e420636bdf990b
-
SHA256
d05f54ffa289cf6eb2fd3f34ad3efc5d6dcd9c8bc305edac5cb4738bde1852a9
-
SHA512
fa013065d1e57e1c3852b7adbf22d3c2847e3e17fe2f71a901bd3c50ba7b6bc333b5b6931f9e65fd1d3e79da24372dc322008ffed61d1ea2069eddee3ba675b8
-
SSDEEP
6144:qUxb5ai286LZbxYu9OydEioJLbiWFN3RhvVr5+5PcAYcEemehCITfwbPsHSxc6Ul:zxk/vxYuUyui4+WFNBFVdmPBqJjIzwby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SHIPPING DOC CICOOPLBL.bin
Files
-
d05f54ffa289cf6eb2fd3f34ad3efc5d6dcd9c8bc305edac5cb4738bde1852a9.zip
Password: infected
-
SHIPPING DOC CICOOPLBL.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 469KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ