Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3.exe
Resource
win7-20241010-en
General
-
Target
dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3
-
Size
714KB
-
MD5
22940722eb3c599faef6a56678f4c2cc
-
SHA1
c875f3123059e03e1f5fc5bb5b43d99c77537799
-
SHA256
dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3
-
SHA512
7c9edf94558a83a40250c155f5e5344fdb15ac262cbf5fd71b0fdc1b14a37433838a6b3a2fd46b6a0bcb2a73047d86ff77e22db80188be18ac008e689c09daf0
-
SSDEEP
12288:5A/xi4vcaskTmuilYMen9XTdhQatYVFkjsrWXOFzd4iJPq28PJpj2IOoS:i/xfkqaflveTVtUkwrPthq2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3
Files
-
dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L_gaTS Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L_qF9F Size: 711KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE