Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Sigmanly_39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be.exe
Resource
win7-20240708-en
General
-
Target
Sigmanly_39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be
-
Size
2.8MB
-
MD5
3d433b38ddd7681112b41ac5d55e0e50
-
SHA1
b6e2898e0bfe4dd14c1aaf35408436baea062815
-
SHA256
39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be
-
SHA512
dd3c8512d745bae07da4075e6871a4136c69a6fb95ca3be5e3c81e13e311f15086cebc3e992043d7bea171066f71adaa3218fed6d7b1221305d613b65310ef5c
-
SSDEEP
49152:jlyQnLvsMFBXjtElACNNQbcjLjkzy+YALjSTxbnyhRXHEOmDbLWme98nJv:vLv1zTtEtH39SRUlLWmB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sigmanly_39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be
Files
-
Sigmanly_39cf6f9ee572a1b88a008fee671033e8f12e9fd3acae3bcc8d396ccef4d8b5be.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 153KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ujmaiaqf Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ksykldfr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE