Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
6fbc09d09c2290b681d47b26da4f2dfb8649ee4e424af854ce516eb20939c6f5N.exe
Resource
win7-20240903-en
General
-
Target
6fbc09d09c2290b681d47b26da4f2dfb8649ee4e424af854ce516eb20939c6f5N.exe
-
Size
472KB
-
MD5
fdb3bd53db5da8dbde523bce6d2cd740
-
SHA1
984c2431d4898ea8a644ac846e22da16c0215b03
-
SHA256
6fbc09d09c2290b681d47b26da4f2dfb8649ee4e424af854ce516eb20939c6f5
-
SHA512
f194ce776a71ac0534f4dcfe5c7428549f3dc293c9b492ddaf0ded88299c8596743518fd6d2bd0f15dd9d562b6370fbe0868050252abc8cffae5af206a001cbb
-
SSDEEP
3072:68RinudiP52xx67lLdyiHDoCzevDH6CevZ4EOssM:3kgiPA6RgPAMDH6/Z4Er
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fbc09d09c2290b681d47b26da4f2dfb8649ee4e424af854ce516eb20939c6f5N.exe
Files
-
6fbc09d09c2290b681d47b26da4f2dfb8649ee4e424af854ce516eb20939c6f5N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ