Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
9fa65520148046f0e3791249d36a42ec4401f8f5db36091bc63156c778e4252a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9fa65520148046f0e3791249d36a42ec4401f8f5db36091bc63156c778e4252a.exe
Resource
win10v2004-20241007-en
General
-
Target
9fa65520148046f0e3791249d36a42ec4401f8f5db36091bc63156c778e4252a.exe
-
Size
293KB
-
MD5
90685b3446365662273f08298a9724c3
-
SHA1
2f1881d820114d9e567aaf3185754f6d0cdc0645
-
SHA256
9fa65520148046f0e3791249d36a42ec4401f8f5db36091bc63156c778e4252a
-
SHA512
d7675048d87e3265665339b9f57c34d9d6070507d935e7e8d7bcb2681434c3a8e6a6999aa901f0d9bf1ac872079a95daaa595eb04340cf14175323f3154ca981
-
SSDEEP
6144:f5ZdP3uQMi7StiABLHGEEUqdGrxrL0Or1jQQdy02sbYB:fdP3d2uO0Or1WkbYB
Malware Config
Signatures
Files
-
9fa65520148046f0e3791249d36a42ec4401f8f5db36091bc63156c778e4252a.exe.exe windows:4 windows x86 arch:x86
50d95dddfb26ed25c49edc057f0f4c90
Code Sign
01Certificate
IssuerO=Limited Function Inc.,ST=Bored Stubborn,C=AL,1.2.840.113549.1.9.1=#0c116c696d69746564407961686f6f2e636f6dNot Before16/07/2018, 00:22Not After15/07/2020, 00:22SubjectO=Human Resources,ST=Border Control,C=BS,1.2.840.113549.1.9.1=#0c1868756d616e7265736f7572636573407961686f6f2e636f6d6b:18:85:43:e9:a1:25:ee:30:bf:0a:1b:bb:3d:07:9a:4c:2a:06:6fSigner
Actual PE Digest6b:18:85:43:e9:a1:25:ee:30:bf:0a:1b:bb:3d:07:9a:4c:2a:06:6fDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
RaiseException
HeapAlloc
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
WriteFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
LoadResource
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
GetLastError
SetLastError
InterlockedDecrement
GlobalFlags
MulDiv
lstrcpynA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
lstrlenA
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
user32
UpdateWindow
LoadIconA
IsDialogMessageA
SetWindowTextA
ShowWindow
GetClassNameA
PtInRect
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
SetFocus
AdjustWindowRectEx
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
SendDlgItemMessageA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
GetClientRect
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
MapWindowPoints
GetSysColor
IsWindowEnabled
SendMessageA
EnableWindow
UnregisterClassA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
SelectObject
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
comctl32
ord17
ws2_32
gethostbyname
gethostname
closesocket
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ