Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4bN.exe
Resource
win10v2004-20241007-en
General
-
Target
be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4bN.exe
-
Size
766KB
-
MD5
a0218a67b0d9faf2721cae2bde1d1a10
-
SHA1
6ca3ebd170d21e6e9b572f2386bb828d0afcba4a
-
SHA256
be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4b
-
SHA512
d7ce12cee7d3eb85e09139741d77b5a2a3d203d1a10aa620d3b4a17668317dc28248a84f0c0a20ce165c1f32804e6b6b2cde90e59e8ccb3ee8e3f9b5d3d7fdd9
-
SSDEEP
12288:nKDiXNmHNpcGWH69SIW5JBvOwcMBl4tT5jVXctOpctHni7LEwv:nMiXNKNpM6jW5JDcIit+OpAHUEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4bN.exe
Files
-
be3d44217a6e68c19c91cf9bc4eefb6ec537a0e70fe3d3095519fd3dec9f9b4bN.exe.exe windows:5 windows x86 arch:x86
17fedc67c91a23016ced8a879a1b9a8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
SearchPathW
SetLocaleInfoA
SetErrorMode
InterlockedIncrement
InterlockedDecrement
ReadConsoleOutputAttribute
GetEnvironmentStringsW
GetTimeFormatA
SetEvent
GetModuleHandleW
GetDateFormatA
GetCommandLineA
SetProcessPriorityBoost
LoadLibraryW
DeleteVolumeMountPointW
GetConsoleAliasW
GetStartupInfoA
SetLastError
GetProcAddress
SetFileAttributesA
BuildCommDCBW
GetNumaHighestNodeNumber
GetAtomNameA
LoadLibraryA
Process32Next
LocalAlloc
GetFileType
AddAtomW
AddAtomA
FoldStringA
CreatePipe
GetModuleHandleA
OpenFileMappingW
GetShortPathNameW
EndUpdateResourceA
GetVersionExA
FindFirstVolumeW
UnregisterWaitEx
HeapAlloc
MultiByteToWideChar
GetLastError
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
user32
GetProcessDefaultLayout
Sections
.text Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ