Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
fe6d37543bd62c6e747200e6c15cf4b9c1d9f01deaa18b50b98b5f9d1d29ca6dN.dll
Resource
win7-20240708-en
General
-
Target
fe6d37543bd62c6e747200e6c15cf4b9c1d9f01deaa18b50b98b5f9d1d29ca6dN.exe
-
Size
133KB
-
MD5
fa4068af24b561ba1fed576a4d425c00
-
SHA1
500fd0a4501433b8ec5c258ad852e595a687da7b
-
SHA256
fe6d37543bd62c6e747200e6c15cf4b9c1d9f01deaa18b50b98b5f9d1d29ca6d
-
SHA512
95606bf622ac38dd58a638361583340179230450b328f461b1ff476edfcdf4e7150d8040ed0199e858de8365699fa0202264dd67ef508de8488ced3695687237
-
SSDEEP
1536:s0rCGdqi981XABsb30TN2s+zheW6BVrqzCJ3bdDY+W14N4NmzWlIA7hKRQv/zgIj:nC31l3q2lQBV+UdE+rECWp7hK2/zbj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6d37543bd62c6e747200e6c15cf4b9c1d9f01deaa18b50b98b5f9d1d29ca6dN.exe
Files
-
fe6d37543bd62c6e747200e6c15cf4b9c1d9f01deaa18b50b98b5f9d1d29ca6dN.exe.dll windows:5 windows x86 arch:x86
e62fa59ee142a56a462d1ecaafb77d17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAddAtomW
InitializeCriticalSection
TlsAlloc
LocalFree
TlsGetValue
GetProcAddress
LoadLibraryW
GetCurrentThreadId
TlsSetValue
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
VirtualAlloc
VirtualQuery
TlsFree
VirtualFree
CloseHandle
Sleep
ResumeThread
GetThreadContext
SuspendThread
OpenThread
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetCurrentProcessId
FlushInstructionCache
VirtualProtectEx
GetCurrentProcess
GlobalDeleteAtom
GetSystemInfo
DeleteCriticalSection
user32
UnhookWindowsHookEx
CallNextHookEx
GetPropW
PostMessageW
SendMessageW
FillRect
SetWindowsHookExW
SetPropW
RemovePropW
GetSystemMetrics
gdi32
CreateSolidBrush
DeleteObject
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ