Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
87fbaa9b3ef4e605aaf8ad54819726540bea7b6393e213090dda98bc33f3d647N.exe
Resource
win7-20240729-en
General
-
Target
87fbaa9b3ef4e605aaf8ad54819726540bea7b6393e213090dda98bc33f3d647N.exe
-
Size
1.8MB
-
MD5
3c8d4f3ec21d783b2f3707d8b3032f60
-
SHA1
887569a68eafe58323538229a1c89a5681449a31
-
SHA256
87fbaa9b3ef4e605aaf8ad54819726540bea7b6393e213090dda98bc33f3d647
-
SHA512
9013cdd7985e2103cfb985126e4022697309abb705716fa3099e45dc2a4b7537be2e0df1bb9b489ea83cc159c3f8c36140fd0e4183a83b6eeea3a3cd19d93bed
-
SSDEEP
24576:GiZI3q/ZYhTUvu4XYCK7mqtpvp8GPlAdD/9zmt26WeQcEcPH8GLMOMGEP0d:G0IqwUVXN+8GPap9iOrGLJM/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87fbaa9b3ef4e605aaf8ad54819726540bea7b6393e213090dda98bc33f3d647N.exe
Files
-
87fbaa9b3ef4e605aaf8ad54819726540bea7b6393e213090dda98bc33f3d647N.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpbpkrln Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wqtpmzhh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE