Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order-9765456-export23....exe
Resource
win7-20240903-en
General
-
Target
2.rar
-
Size
72KB
-
MD5
18edfb5f1e4c1e30b8e1f555bb1a033e
-
SHA1
d6901e6c43cb15f287d564438208036839860cd2
-
SHA256
ff1208db06c1a0514442ebf5bd2b328f087ef8327d4bea9da55399850d23da7e
-
SHA512
d57a84ba62a31fb8221fcbd70b1272ba24e0f1042c7957fd0d64d46efcea3550849f06e2e4d75e49b88975f8410c3995ad101d067dcac486eda08c29f0355adc
-
SSDEEP
1536:xRhxo0FYmex2Phn58CiUBJwPdtzdpFKDr+7me/P/2+olEPnf3ort:nDFQI8qnwPXz4uaYP/4lEPwrt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Purchase Order-9765456-export23....exe
Files
-
2.rar.rar
-
Purchase Order-9765456-export23....exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ