Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891.exe
Resource
win10v2004-20241007-en
General
-
Target
e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891
-
Size
56KB
-
MD5
b45c565317d7a8b24f5b47d35586d4e4
-
SHA1
3bff2e84001a171919008bffac2f8286755f6f8a
-
SHA256
e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891
-
SHA512
21c917d767195f8ce3e76cf2208f18a581f842a1b348f0015f228a3bbc4691d1e31089cff41c9073dcdac6c1ae51f44882bf746965dcfdf19c4ad60af51319e9
-
SSDEEP
768:Q5FTVzAxUQfAj4tlpn3Nzf/h1uJ8Y0UU72I0vYnZxUGAL0NCScujsZtlMc9QVVXZ:+QHDc2ZKL08QIZuM+fibmLd6xhry0ns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891
Files
-
e9dcdfaecea2aa774e0088604ef485c65b359966fa85527e5065a1c458e80891.exe windows:4 windows x86 arch:x86
490f9e4dde273358987be9c86e54282f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetBinaryTypeA
SignalObjectAndWait
lstrcpynW
DebugActiveProcessStop
OpenProcess
GetTempFileNameA
SetEndOfFile
WritePrivateProfileSectionA
EnumDateFormatsW
LZCreateFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE