Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ec2fec19768b0cb797d08cdc4c1de72faeab5550bde249633e6fbb5c00771199.exe
Resource
win7-20241023-en
General
-
Target
dac3ffc1c455d8de9ca645a96064a5f36a508c3cdbc45b355cba3ea9a4d7d964
-
Size
445KB
-
MD5
19e04a5de2159171431c86053226050b
-
SHA1
c7ade86b0857764532ba32886390da8b7486a1aa
-
SHA256
dac3ffc1c455d8de9ca645a96064a5f36a508c3cdbc45b355cba3ea9a4d7d964
-
SHA512
eb22e55d5d5d33f1626f2558fc618dd4e7f581bbe774ac099771f0cbe754d7be83fe33d8cdfbc44c0157787d20c667dde3de8e80d56c090b2534e3b2734d4088
-
SSDEEP
12288:KL8FRHyVwou0AT3yxiyuBZMlQDa6gtVlUPO:Ei6ATysh24a66VGPO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ec2fec19768b0cb797d08cdc4c1de72faeab5550bde249633e6fbb5c00771199
Files
-
dac3ffc1c455d8de9ca645a96064a5f36a508c3cdbc45b355cba3ea9a4d7d964.zip
Password: infected
-
ec2fec19768b0cb797d08cdc4c1de72faeab5550bde249633e6fbb5c00771199.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 478KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ