Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
5d0f8ac9da9ca44a4c2a845798c1992cac715cd7e60c28ad6524e20b3aa3cd5cN.exe
Resource
win7-20240903-en
General
-
Target
5d0f8ac9da9ca44a4c2a845798c1992cac715cd7e60c28ad6524e20b3aa3cd5cN.exe
-
Size
71KB
-
MD5
3958deddaef3fe3737c2a7566c3f3800
-
SHA1
051a7a844e9bf717ee161af71333a78115aac3b8
-
SHA256
5d0f8ac9da9ca44a4c2a845798c1992cac715cd7e60c28ad6524e20b3aa3cd5c
-
SHA512
29c580730edeebabf5b0c49abc058c64b1d2d1fe21f285d0cff4f07c49a43e2efbd0629c89a9a2742f3a16fa1a69cb882605e6e25fbe0f93e6352918d087657f
-
SSDEEP
1536:Id9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZSDHIbH:4dseIOMEZEyFjEOFqTiQmQDHIbH
Malware Config
Extracted
neconyd
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
-
Neconyd family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d0f8ac9da9ca44a4c2a845798c1992cac715cd7e60c28ad6524e20b3aa3cd5cN.exe
Files
-
5d0f8ac9da9ca44a4c2a845798c1992cac715cd7e60c28ad6524e20b3aa3cd5cN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE