Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
Resource
win7-20240903-en
General
-
Target
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
-
Size
2.5MB
-
MD5
9b892f3701af9bec0a0c8ecb0291fe50
-
SHA1
2072b60eaa35a6e7ea0b5abb75508705e92e869d
-
SHA256
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aa
-
SHA512
fe611422a9758cd4de9a34aa029c84d70d0322b3d5f188b72f6ccc2579655be0a8c16884626711f7881cf08f1b833c6990a4e7558007762cdabe235d3a64805d
-
SSDEEP
24576:gRKaPH2Z4nET7PIgOLoJNlVq4YmDWG9Dsl:g5PHe+O1LPlU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
Files
-
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 864KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2J��u Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE