Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
RavenGen.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
RavenGen.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
RavenGen.exe
-
Size
6.1MB
-
MD5
c8aeb6df26f168f40e546ea284f3a12a
-
SHA1
8b6fd323ab0860e838e359b47cb0c432e37dd9bd
-
SHA256
a5795f05ca4de63e25ecfe7636a77e4d4e2d48963931f35dcad728dc4cd08956
-
SHA512
4f86e47e76ce8dd0b374142988d4e82849a96768443fb5e1c65cfc3b527578296125dce7fc7619afc8ef4df40eb3c098128c31137215ea73237fc1c07d78351c
-
SSDEEP
196608:bSkSIlLTUcwti7TQl2NgVg01MWAXAkuujCPX9YG9he5GnQCAJKN:OkSopwtQQl2aOtXADu8X9Y95GQLJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RavenGen.exe
Files
-
RavenGen.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ