Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
f047581f338afd3abc2add1d68e42655b59717bbbcfdb971e799106332d319da.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f047581f338afd3abc2add1d68e42655b59717bbbcfdb971e799106332d319da.exe
Resource
win10v2004-20241007-en
General
-
Target
f047581f338afd3abc2add1d68e42655b59717bbbcfdb971e799106332d319da
-
Size
168KB
-
MD5
580b2e62267f6280619da3bcd214d5b2
-
SHA1
6306d5236f169965e73a57adb68fc3d9e1debdbb
-
SHA256
f047581f338afd3abc2add1d68e42655b59717bbbcfdb971e799106332d319da
-
SHA512
6e5dc1bffe3240d803be3f392ce25669966e55ffdf697b282e745ed1f456bdbb34d0dc4626e25e4fb50387c90979a2e9807cdd1d90e1a353f086c950ae4d37e3
-
SSDEEP
3072:PoJIKqjcZD0byTKBMzYAVAF78iL+W9Se1XvRnxOR7cpaZFs0kJ:PnpcSMzvW18iL+W9LvFwBDZFsdJ
Malware Config
Extracted
xloader
2.5
bffc
fullframephotos.net
baixingzb.com
amisazer.com
kaliseastrand.com
nokiasoftware.net
5ztf6.xyz
starfleet.agency
pharmatechjob.com
shushukaizen.com
kdetest.xyz
aravlal.com
allforallady.com
softautumnhum.com
lightfully.info
sewunique.online
thewoodcockinn.com
belleza.house
partysbyfrances.com
geretaxservices.com
usthrivetogether.com
1524019.win
hbfdata.com
fisgloballlc.com
bruztricks.xyz
sweetopiachocolates.biz
draftkendall.com
my-hotel.net
growyouredgesback.com
highestwedding.com
sdclick.com
shiningstarskennel.com
bluestarpbx.com
thepregancytester.com
sd-pefilm.com
cubares6.com
aerasventilacion.cat
mississaugaremax.online
adrianaassis.online
zotrillion.com
universobraasilshop.com
luuquangstore.com
megafamoso.com
defekt.store
deepcoti.com
kyleijenner.com
invictusnet.works
acuityair.com
deeerlijkemoeder.com
crystallineawakenings.com
calebtristan5000.com
indianclubsmm.com
jax1.website
grownwings.com
lfc111.com
eegfall.com
zedexbank.com
theonequestionvideoshow.com
4communi-t.com
hf69385.com
onloe.com
quebaratostienda.com
marsctattoo.com
fivespotfrozenyogurt.com
nckp42.xyz
tcbacal.com
Signatures
Files
-
f047581f338afd3abc2add1d68e42655b59717bbbcfdb971e799106332d319da.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ