Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
1024e0af873e4551473e92aac636e4d70336d80efa17cf927654491d13470fb5N.exe
Resource
win7-20241023-en
General
-
Target
1024e0af873e4551473e92aac636e4d70336d80efa17cf927654491d13470fb5N.exe
-
Size
245KB
-
MD5
d2e0491598e6219ff396c385a228f420
-
SHA1
4213496755b6e42d365c9488e75b70412e436452
-
SHA256
1024e0af873e4551473e92aac636e4d70336d80efa17cf927654491d13470fb5
-
SHA512
57ac6d3cbd053e8554f430c1deef7c86b05336ac8b3491f1b440cfa3f8f05327c0dc32a3f418f6ec2be7b4112b758a76200b17ab65316daa35fc83d468f90e55
-
SSDEEP
6144:7pkEWLxcJ2+XgbvRMdS7p6UMQgkZwgJqnHRZZ/8xuiq:qE0cDXgbsSWQgkZj0HRZB8ML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1024e0af873e4551473e92aac636e4d70336d80efa17cf927654491d13470fb5N.exe
Files
-
1024e0af873e4551473e92aac636e4d70336d80efa17cf927654491d13470fb5N.exe.exe windows:4 windows x86 arch:x86
47457efadcd7467d7ac4e9f427fee335
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
wsock32
WSACleanup
shell32
ShellExecuteExA
ole32
CoTaskMemFree
urlmon
URLDownloadToFileA
comctl32
_TrackMouseEvent
wininet
InternetOpenUrlA
winmm
waveInUnprepareHeader
netapi32
Netbios
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
gdiplus
GdipGetImageEncoders
shfolder
SHGetFolderPathA
ws2_32
WSAIoctl
msacm32
acmStreamUnprepareHeader
pstorec
PStoreCreateInstance
rasapi32
RasGetEntryDialParamsA
url
InetIsOffline
avicap32
capGetDriverDescriptionA
Sections
.text Size: 218KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE