D:\data\landun\workspace\p-3d7f88f5f52b43179dd219a5c6dd1b5c\src\bin\Release_Win32\biz_notify.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b24b243683ec21b47a86a75321f3698c6d1228b72ca59aeddeb156d22d0c3364.exe
Resource
win7-20241010-en
General
-
Target
b24b243683ec21b47a86a75321f3698c6d1228b72ca59aeddeb156d22d0c3364
-
Size
375KB
-
MD5
b0755633ae786e7d6833b663e3cbb261
-
SHA1
0d7250cba74cc2356acb52865a7e644405152f79
-
SHA256
b24b243683ec21b47a86a75321f3698c6d1228b72ca59aeddeb156d22d0c3364
-
SHA512
81d273598f488c28dde323e14ae8f4486f04f0b70e4a38300d954b0ad9b8c1b8508751387040bdd972fc464e553b93ca3aa852185e5183bbff1abea3637985ff
-
SSDEEP
6144:DIIII9B2Yrk4cA7qUAOydjKFlSb7cva/gndZdVsvQNdo16z1:hB2YY7Uo9dcva/GjsedZz1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b24b243683ec21b47a86a75321f3698c6d1228b72ca59aeddeb156d22d0c3364
Files
-
b24b243683ec21b47a86a75321f3698c6d1228b72ca59aeddeb156d22d0c3364.exe windows:6 windows x86 arch:x86
f1379cddd13d5d35f269a568f356aa34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCommandLineW
OpenMutexW
LoadLibraryExW
WriteFile
CreateFileW
FormatMessageW
LocalFree
HeapFree
LocalAlloc
OutputDebugStringW
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
CreateMutexW
ReleaseMutex
QueryPerformanceCounter
GetSystemDirectoryW
InitializeCriticalSectionEx
EncodePointer
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RaiseException
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
HeapReAlloc
LCMapStringW
SetFilePointerEx
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
GetConsoleOutputCP
WriteConsoleW
GetEnvironmentVariableW
GetCurrentThreadId
FindClose
GetCurrentProcess
FindNextFileW
SetLastError
lstrcmpW
GetLastError
GetProcessId
GetModuleFileNameW
DecodePointer
CloseHandle
AcquireSRWLockExclusive
SetEvent
ReleaseSRWLockExclusive
CreateEventW
WaitForSingleObject
InitOnceExecuteOnce
user32
SendInput
AllowSetForegroundWindow
shell32
ShellExecuteExW
ole32
CoRevokeClassObject
CoReleaseServerProcess
CoAddRefServerProcess
CoRegisterClassObject
CoResumeClassObjects
CoInitializeEx
imm32
ImmDisableIME
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
api-ms-win-core-winrt-error-l1-1-0
RoOriginateError
shlwapi
PathRemoveFileSpecW
PathAppendW
advapi32
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAceEx
GetLengthSid
RegCloseKey
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE