Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Order 4566789.exe
Resource
win7-20241010-en
General
-
Target
16c7ab46f5e4931cdefb3b1d8f68da319ab955660bf9bc390f2755a7f410dd23
-
Size
535KB
-
MD5
7dc803c4f09779607035e820c2f3835a
-
SHA1
3f878ce8fdca8a1ceffeb618459f6c17a7660ed6
-
SHA256
16c7ab46f5e4931cdefb3b1d8f68da319ab955660bf9bc390f2755a7f410dd23
-
SHA512
753fa69821d984d2809f68afd7e26fff02e5c51337ef0fc4e81c90381965a1e2e1c5cc7f4f449b8b1346d810ee6ff9469c39dfe6058a8c930eabfa49cf077fe5
-
SSDEEP
12288:3Hu7P2EL5uvYa9polISNZFHKpptTkyND/rj+b:3u7+suYajolISspptTHNvSb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Order 4566789.exe
Files
-
16c7ab46f5e4931cdefb3b1d8f68da319ab955660bf9bc390f2755a7f410dd23.zip
Password: infected
-
b75f765385a2deb81c8cffe896cc209d772a9bfbd5694f67174c7faec5dcc54e.rar
-
Order 4566789.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 835KB - Virtual size: 835KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ