m
uko
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2024-12-24_f964ddfb61ae947de33cfc5d2c3f84d7_spora.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-12-24_f964ddfb61ae947de33cfc5d2c3f84d7_spora.exe
Resource
win10v2004-20241007-en
Target
2024-12-24_f964ddfb61ae947de33cfc5d2c3f84d7_spora
Size
253KB
MD5
f964ddfb61ae947de33cfc5d2c3f84d7
SHA1
2d7cc827c636a9c87d01f32dfe456488e89a5df5
SHA256
0304704c54651e18d560ebddc7808e85fc1cae7331d4d2adfbfd4195c2f2e2bf
SHA512
b88a805e86afceb5323af714712ac9912f0aa836d3ebaf1afda426f6c395fd37383ae0210d331e2dd77f5dc39048b35c52c6c403f3b04cc17248dd55d4e6bfcd
SSDEEP
6144:xSpsZjPwS/DuL8f8aUChN9lCKF6r2UfzA:9jPlRf8aUm6rFfE
Checks for missing Authenticode signature.
resource |
---|
2024-12-24_f964ddfb61ae947de33cfc5d2c3f84d7_spora |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHCreateDirectoryExA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SheChangeDirA
ExtractIconW
SHQueryRecycleBinA
ShellAboutW
SHGetMalloc
ShellExecuteW
PathIsSlowW
DragQueryFileA
SHGetSettings
SHGetFileInfoA
SHFree
StrStrW
GetSystemTime
GetCommandLineA
CopyFileA
InterlockedIncrement
GetStringTypeA
CreateJobObjectA
WriteConsoleA
FindAtomA
WriteProcessMemory
GetCurrentThreadId
TlsGetValue
GetLogicalDriveStringsA
CreateMailslotW
SetCurrentDirectoryA
OpenMutexA
CreateMutexW
GetFullPathNameA
GetModuleHandleA
GetCurrentThreadId
OpenProcess
GetVolumeInformationA
CompareStringW
CreateDirectoryA
GetProcAddress
WaitForSingleObject
FindVolumeClose
OpenWaitableTimerW
GetCurrentProcess
FileTimeToSystemTime
GetNumberFormatW
GetShortPathNameA
CreateFileW
GetDateFormatW
GetEnvironmentStringsA
GetPrivateProfileStringA
OpenJobObjectW
CAEnumFirstCA
CACloseCA
CAEnumNextCA
CACloseCertType
m
uko
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ