Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2ac67a0089642f492bc17a207bad98bb01946761e13502481b7bf74c061d67ce.exe
Resource
win7-20240903-en
General
-
Target
2ac67a0089642f492bc17a207bad98bb01946761e13502481b7bf74c061d67ce
-
Size
3.1MB
-
MD5
b790bb4d2e3fff8cb368362e5b51aa7d
-
SHA1
0f4ae315171dd5551e608db42f5eb12ebf899f50
-
SHA256
2ac67a0089642f492bc17a207bad98bb01946761e13502481b7bf74c061d67ce
-
SHA512
6098f8da78f21335ece31d9bc0568484f439ef80f3c8926d1dd5537f8ebd2e5e92180ae3598c5fbd7a5db77d93e8074337f5365adc42178fd11cf22de97ccc36
-
SSDEEP
49152:a2wBF+rqvQ0BQutRzFhCZuAcRSyKaaFt6gDOU7:aYrqvQ0ltRz3C8RSuUt6gDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ac67a0089642f492bc17a207bad98bb01946761e13502481b7bf74c061d67ce
Files
-
2ac67a0089642f492bc17a207bad98bb01946761e13502481b7bf74c061d67ce.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oinjjubx Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ezbpnlxj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE