Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
14df41fc65584367f11a4b221e2ecc7414639449fafd05692f82c47f19c3422a.exe
Resource
win7-20240708-en
General
-
Target
83c6178fb84fe7cb7b907b7538adf183.bin
-
Size
1.8MB
-
MD5
a70e6b77e7fbc2c604b889184c6bc10b
-
SHA1
f53dd8df808e2b6c2ad8f18abe1e9bfd7f587cfd
-
SHA256
267890e542ca538d12fe04d86c769d5200f10651194b4476146404d8828573a8
-
SHA512
e66551face23ca492dec058b292beac88ab7859c2d5ef54a35b9825cd1cc391454767239c241aac896e13385c4317136a58090a2c1c6eebd26680fade7d3bc13
-
SSDEEP
49152:kyvv4qaxUdxh6jgKrOvH6t3qfOspEvWLS:k8v4hxUxhggSOf+qG4Ed
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/14df41fc65584367f11a4b221e2ecc7414639449fafd05692f82c47f19c3422a.exe
Files
-
83c6178fb84fe7cb7b907b7538adf183.bin.zip
Password: infected
-
14df41fc65584367f11a4b221e2ecc7414639449fafd05692f82c47f19c3422a.exe.exe windows:6 windows x86 arch:x86
Password: infected
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvlyafdv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uczmgvll Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE