Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
9b5d229878b94dd7ec60341154eba7f1979ef3b33ecb3869c9ce0ba977491ae9N.exe
Resource
win7-20240903-en
General
-
Target
9b5d229878b94dd7ec60341154eba7f1979ef3b33ecb3869c9ce0ba977491ae9N.exe
-
Size
286KB
-
MD5
6754e357ab9b6c1ab54eff2533984b40
-
SHA1
c722597b487cdfa5b54e355260a7fed67da9b295
-
SHA256
9b5d229878b94dd7ec60341154eba7f1979ef3b33ecb3869c9ce0ba977491ae9
-
SHA512
abefb2cdbed9f40970a36df9a76cd0c8a7f30ce3c87c526307683ed483a77cb42ee1cea1917df80e560b57cf10efe6cdbef5ec0959e722ee4bad49342e6593fb
-
SSDEEP
6144:fSiKFdQky0OLKs4xEQUAjdInjBfaiMkxuz38SrvspvW90lmVP:WdQkhOLKsQEQUAjdInjBfaiMkxuz38SP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b5d229878b94dd7ec60341154eba7f1979ef3b33ecb3869c9ce0ba977491ae9N.exe
Files
-
9b5d229878b94dd7ec60341154eba7f1979ef3b33ecb3869c9ce0ba977491ae9N.exe.exe windows:4 windows x86 arch:x86
9060a69cc357957e402cbdaa06c502b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
Sleep
RtlUnwind
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
FlushFileBuffers
HeapSize
CreateFileA
CloseHandle
FreeEnvironmentStringsW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCommandLineA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetProcessHeap
HeapAlloc
WaitForSingleObject
LocalFree
DeviceIoControl
ExpandEnvironmentStringsA
ResumeThread
SetThreadAffinityMask
CreateFileW
FormatMessageA
GetLocalTime
GetSystemTime
GlobalFree
GlobalUnlock
GlobalHandle
GetOverlappedResult
CreateEventA
GlobalLock
GlobalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
MoveFileA
ExitThread
CreateThread
ReadFile
RaiseException
SetEndOfFile
lstrlenA
GetVersionExA
HeapFree
GetTimeZoneInformation
user32
wsprintfA
MessageBoxA
oleaut32
SysAllocString
VariantClear
SysAllocStringByteLen
SysFreeString
SysStringLen
ole32
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize
advapi32
RegOpenKeyExA
CloseServiceHandle
EnumServicesStatusA
OpenSCManagerA
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE