DllRegisterServer
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.dll
Resource
win7-20240903-en
General
-
Target
b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.exe
-
Size
394KB
-
MD5
7fd8389c38c0e8af73597de6248093e0
-
SHA1
7a9da44cc2ecbdcd6bf0f461a96a6748620dcc8b
-
SHA256
b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784
-
SHA512
ee1340621e818d527bc8bed8314b453eb9f16669aa3e0ea53b84ded5527bd8547cc4a4ac7f809fc4709c1aceb93cec7f1790a4ad68d91946666770b3eac0b74e
-
SSDEEP
12288:Q3CwdqnhEUzF1WXfe9cNnIncTRcq9CDFFiC8vE:ACwEnhE+F1h9oPPwF0CME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.exe
Files
-
b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.exe.dll regsvr32 windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ