Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe
Resource
win7-20241010-en
General
-
Target
80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe
-
Size
266KB
-
MD5
1102cdc49752fd9a3019f78c094ecec0
-
SHA1
c492d7d3a911f5a4c2e94b4234fb8c425a9b37c8
-
SHA256
80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52
-
SHA512
c4d34ce58dff3b0d17bf8caefed7b32c5904d7b99b70a42fcd0973222b6de47cd91861ce13a06fbccb650aaef16ca9a02d76905e31494b0c44db18c37b98131c
-
SSDEEP
6144:sbl+Mk9MptqB9MbItgwZK7z242GmtoBUU:csMDM9M0tgjn242i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe
Files
-
80b5112d165f58a6e601c0713f78080466fa8bde4a699ff23585cee3cd736e52N.exe.exe windows:5 windows x86 arch:x86
300d8004bbb5b3fa944a077c79942627
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
SetProcessAffinityMask
GetLocaleInfoA
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterA
UpdateResourceA
GetConsoleAliasA
InterlockedDecrement
SetDefaultCommConfigW
GetEnvironmentStringsW
Process32First
GetTimeFormatA
GetProcessPriorityBoost
GetModuleHandleW
ReadConsoleOutputA
GetVolumePathNameW
GlobalAlloc
LoadLibraryW
ReadProcessMemory
GetSystemWindowsDirectoryA
FormatMessageW
GetStringTypeExW
GetFileAttributesA
WriteConsoleW
GetModuleFileNameW
DisconnectNamedPipe
GetLastError
GetProcAddress
ResetEvent
OpenWaitableTimerW
GetFileType
MoveFileA
AddAtomA
SetCommMask
GetModuleFileNameA
OpenFileMappingW
BuildCommDCBA
FindAtomW
SetFileAttributesW
GetModuleHandleA
HeapFree
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
RaiseException
user32
GetMonitorInfoW
GetClassLongW
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ