mstore.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
83dd64450a21d0ac336904e4dcdbd424ea1a1610c70cc38f8b3fb9b96b8e0fa5.exe
Resource
win7-20240903-en
General
-
Target
83dd64450a21d0ac336904e4dcdbd424ea1a1610c70cc38f8b3fb9b96b8e0fa5
-
Size
195KB
-
MD5
65b5b47deecbd805fc71f2a46c642bd6
-
SHA1
b690629f6e28910fb808cc9a319d5398e36dbbfd
-
SHA256
83dd64450a21d0ac336904e4dcdbd424ea1a1610c70cc38f8b3fb9b96b8e0fa5
-
SHA512
8f32a0ff85caf008c8bab23dc2a25cd5a89f233f5ca265bd55f802aed51610b9a0aaa4d529f6c64ed435078f798820878799724233c66b3a76bf704c0a892406
-
SSDEEP
6144:Mf1toUY8hx0ZJTL47d3IFI1G8BnWS6F60Xlx:M99x0ZJTL47N3ANFllx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83dd64450a21d0ac336904e4dcdbd424ea1a1610c70cc38f8b3fb9b96b8e0fa5
Files
-
83dd64450a21d0ac336904e4dcdbd424ea1a1610c70cc38f8b3fb9b96b8e0fa5.exe windows:4 windows x86 arch:x86
3a67de3cd9841211ed691565b4d6e899
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_except_handler3
memset
swprintf
swscanf
_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
_mbsrchr
_vsnwprintf
wcscmp
_CxxThrowException
realloc
malloc
free
_wtoi
__CxxFrameHandler
wcslen
_wcsnicmp
__dllonexit
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
crypt32
CryptHashPublicKeyInfo
kernel32
GetStartupInfoA
LocalAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
FormatMessageA
LocalFree
GetSystemDirectoryW
LoadLibraryExW
SetUnhandledExceptionFilter
GetCommandLineW
VirtualAlloc
ExitProcess
GetTickCount
OutputDebugStringA
GetModuleFileNameW
HeapAlloc
GetProcessHeap
CloseHandle
WaitForSingleObject
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
SetEvent
CreateThread
CreateEventA
GetLastError
GetCurrentThreadId
AddAtomA
SetErrorMode
FreeLibrary
Sleep
InterlockedIncrement
lstrlenW
GetModuleHandleA
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
LoadLibraryA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
SetLastError
user32
DestroyIcon
MoveWindow
GetAsyncKeyState
GetParent
SetCursor
GetClassNameA
EnableWindow
SystemParametersInfoA
KillTimer
PostQuitMessage
IsIconic
GetWindowRect
OffsetRect
GetWindowPlacement
SetWindowPos
DispatchMessageA
GetMessageA
GetCursorPos
EndPaint
FillRect
BeginPaint
IsWindow
GetActiveWindow
MessageBoxW
MessageBoxA
GetClientRect
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
GetFocus
MessageBeep
SetRect
CharNextA
LoadIconA
LoadCursorA
ShowWindow
UpdateWindow
LoadAcceleratorsA
PeekMessageA
WaitMessage
TranslateAcceleratorA
TranslateMessage
SetTimer
SendMessageA
GetMessageW
PostThreadMessageA
RegisterWindowMessageA
GetSystemMetrics
advapi32
RegSetValueExA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
ole32
OleGetClipboard
OleFlushClipboard
OleSetClipboard
RegisterDragDrop
RevokeDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
OleUninitialize
StringFromGUID2
CoRegisterMessageFilter
oleaut32
SysAllocStringLen
SysStringLen
SysAllocString
SafeArrayDestroy
VariantClear
SysFreeString
VarUI4FromStr
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE