Z:\p4\emmcdl\main\latest\Release\emmcdl.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
34c3f8ac32ffff914e04e41df02d0a323fa4f6c07b9c0a4f8fbe8347b52e8315.exe
Resource
win7-20240903-en
General
-
Target
34c3f8ac32ffff914e04e41df02d0a323fa4f6c07b9c0a4f8fbe8347b52e8315.exe
-
Size
467KB
-
MD5
be211fe64e808aa11b41265b9ef44e40
-
SHA1
bd0066ba72d5ff39aba3989e2a1af6b1feb61001
-
SHA256
34c3f8ac32ffff914e04e41df02d0a323fa4f6c07b9c0a4f8fbe8347b52e8315
-
SHA512
ed4f368b44c91a890f67573b588aebb37d863746273f938837d107c356bc5e4e4c03b903a803ab3fb31f5e52e7e1c49aa7d335386cb40e2e06cc15d327b25f81
-
SSDEEP
6144:4+rxvPoiHw7sQ65lZvygWnMF6kOr6ZOhm1wdZkRmxVEjPLox2xqBBgGLbSs:Prx3IsQelZvAnbRr6ZGm1wdZkIxYWj/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34c3f8ac32ffff914e04e41df02d0a323fa4f6c07b9c0a4f8fbe8347b52e8315.exe
Files
-
34c3f8ac32ffff914e04e41df02d0a323fa4f6c07b9c0a4f8fbe8347b52e8315.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE