Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
c2136daa5869b5e7e10a63c96d3323b2a308445d1129c1a22b3463e4e0fd7ada.exe
Resource
win7-20240903-en
General
-
Target
c2136daa5869b5e7e10a63c96d3323b2a308445d1129c1a22b3463e4e0fd7ada
-
Size
224KB
-
MD5
c39c82b5d90aae3ebe2135bc5855b47d
-
SHA1
a3b297a7c6afd6b4736b42119aa21843a85215fd
-
SHA256
c2136daa5869b5e7e10a63c96d3323b2a308445d1129c1a22b3463e4e0fd7ada
-
SHA512
2d8cb43d0dbd48dfb1daf784ed1db39d9cce0a1501274abbfca36e2984d28f2d6621ed526615a689b96c36a2473e37ea617fb2d92a95740dd78a24f410405ecc
-
SSDEEP
3072:yCTb5pjMvVC/orl+9TuG7a2LZ0aFwS1ESN3ii:ftCVC/GlmwmZ0SwS1Ey
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2136daa5869b5e7e10a63c96d3323b2a308445d1129c1a22b3463e4e0fd7ada
Files
-
c2136daa5869b5e7e10a63c96d3323b2a308445d1129c1a22b3463e4e0fd7ada.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 104KB - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE