Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
a99d23d4a8079dede092a7d11c59be078b15a95ac980ac17de18429177f3bd32.exe
Resource
win7-20240903-en
General
-
Target
a99d23d4a8079dede092a7d11c59be078b15a95ac980ac17de18429177f3bd32
-
Size
1.6MB
-
MD5
575bd93ff02856a8cd4d962e07ed38a9
-
SHA1
d551b4213f551f1397b7f98e80f5b10d78414ac7
-
SHA256
a99d23d4a8079dede092a7d11c59be078b15a95ac980ac17de18429177f3bd32
-
SHA512
d4e9e13495c72349680f68f2fd7f833f8eb5f4dd8fc25006a7920185d522a5fe139665f3110411841f6a6907907062315285bae615cdd5362266058e122c2436
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxTzkx7kvxInClpJT2A:GemTLkNdfE0pZyn
Malware Config
Signatures
Files
-
a99d23d4a8079dede092a7d11c59be078b15a95ac980ac17de18429177f3bd32.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT_CN Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ