Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
db7bc71db5ce39040cdce6842a33b0551d5e5fdbec99eee31f737267c9e4776fN.exe
Resource
win7-20241010-en
General
-
Target
db7bc71db5ce39040cdce6842a33b0551d5e5fdbec99eee31f737267c9e4776fN.exe
-
Size
229KB
-
MD5
d72ee7069049b8e4e76be88f9b1b0510
-
SHA1
de9be03600771c1769ad6719fe41cca69207ae91
-
SHA256
db7bc71db5ce39040cdce6842a33b0551d5e5fdbec99eee31f737267c9e4776f
-
SHA512
0e9a01a6a2d35a71b2ed4393f2d350575355ab6007e9b043f10aead12ae21be041d1f7f12d6ea4266f621df9a2a5535b385d13f520f12fdbb4eab2ff774339fb
-
SSDEEP
6144:zrWkky4FUegTBqoFnBV+UdvrEFp7hKt1z:z6kkDFjgTsoFnBjvrEH7+z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7bc71db5ce39040cdce6842a33b0551d5e5fdbec99eee31f737267c9e4776fN.exe
Files
-
db7bc71db5ce39040cdce6842a33b0551d5e5fdbec99eee31f737267c9e4776fN.exe.exe windows:5 windows x86 arch:x86
159a581b738de78b8615935277ce8e9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
ws2_32
htons
htonl
kernel32
TlsGetValue
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
GetStringTypeW
WideCharToMultiByte
Sleep
MultiByteToWideChar
CreateFileA
WriteFile
SetCommState
SetCommTimeouts
ReadFile
FlushFileBuffers
PurgeComm
CloseHandle
EncodePointer
DecodePointer
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
FindClose
FindFirstFileExA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
InitializeCriticalSectionAndSpinCount
RtlUnwind
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
GetConsoleMode
ReadConsoleW
GetProcessHeap
GetConsoleCP
SetFilePointer
SetFilePointerEx
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
CompareStringW
LCMapStringW
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ