Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5aN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5aN.exe
Resource
win10v2004-20241007-en
General
-
Target
7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5aN.exe
-
Size
275KB
-
MD5
a8d8b14bf2b8181e2b035760ff3f65c0
-
SHA1
1a3653348c81fd4514db826be24f54b76ffa927e
-
SHA256
7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5a
-
SHA512
9bbd82fa49353af3c9719e1499f99c6db50603da8d997c3fb08dc584ebb90b14d9d9090322172845dd42481fbecccfdf72c052b555159e1d0e9592e19772147e
-
SSDEEP
6144:6ZqsBmHDseHUOJLBf0dJ5TTBZbspom7bXmL:MaHDswUOJN0VTTbM/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5aN.exe
Files
-
7625b4d9051a0eef96d3b7b8826643dedde5cebb525408c46c31e8a621892c5aN.exe.exe windows:4 windows x86 arch:x86
570765a534b21835978454932943ebf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
FindResourceW
GetComputerNameA
lstrlenA
UnmapViewOfFile
GetCurrentDirectoryA
CreateFileW
GetModuleHandleA
GetCommandLineA
PulseEvent
FindClose
LoadLibraryW
CloseHandle
CreateProcessA
Sleep
LocalFree
HeapCreate
lstrcpyA
GlobalUnlock
SetLastError
user32
CreateIcon
CheckRadioButton
DrawEdge
SetFocus
DispatchMessageA
CallWindowProcA
CreateWindowExA
GetCaretPos
GetDlgItem
DrawMenuBar
GetDC
FillRect
IsWindow
cryptui
WizardFree
CryptUIDlgSelectCA
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jprpkix Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE