DefortHeksW
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
ecf262c28276e1e67a47aa25c374f39c23a97e8e157734943d9d28da79c93314.dll
Resource
win7-20240708-en
General
-
Target
ecf262c28276e1e67a47aa25c374f39c23a97e8e157734943d9d28da79c93314.exe
-
Size
508KB
-
MD5
eaea073f276a052475df57d27d0cec10
-
SHA1
3400ab1f6dec5f2adeaeaa4a14e3a5e1cbf9c8d4
-
SHA256
ecf262c28276e1e67a47aa25c374f39c23a97e8e157734943d9d28da79c93314
-
SHA512
c05ace375b712da6f025dd84483072b89023ac3870defe201e9c91599c83e937c70af9fe303057946b4638dafca1540355737c21060441f195b7e0686a90929d
-
SSDEEP
12288:rMGeeRE83xVOESLawOVP6hO9724GpBb3d:rMGeee83xVOKchO97SpR3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf262c28276e1e67a47aa25c374f39c23a97e8e157734943d9d28da79c93314.exe
Files
-
ecf262c28276e1e67a47aa25c374f39c23a97e8e157734943d9d28da79c93314.exe.dll windows:6 windows x86 arch:x86
e4354d92e4ab82c15bc7e347b14d1d7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
WaitForSingleObject
DeleteCriticalSection
GetLastError
CreateFileA
WaitForMultipleObjects
WideCharToMultiByte
LeaveCriticalSection
InitializeCriticalSection
Sleep
GetProcAddress
LoadLibraryA
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ