Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5cdd3f667134ad3cda79c81353c37860885bf84c7419da1e9aeb14993850a1a2.exe
Resource
win7-20240903-en
General
-
Target
5cdd3f667134ad3cda79c81353c37860885bf84c7419da1e9aeb14993850a1a2
-
Size
1.7MB
-
MD5
c3b99e00883a10bfd3b0d0c0776f65f7
-
SHA1
a51dcd3f1869aab5cb247267ffe258789a58a6a3
-
SHA256
5cdd3f667134ad3cda79c81353c37860885bf84c7419da1e9aeb14993850a1a2
-
SHA512
5e3a6ab133d4e876b27b3532945804b039511005248cdea9b1b31ac2d83aba654198ee1cfe05613fc63892ba0719f98fb36bffd0d3576ff8f374ddd6b87670ed
-
SSDEEP
24576:0JZuYcUmAT5YtZ8qaKPRHD/Z8lbK7TGBNnMj5Yo8QB+ItX0lQbHRX5SZWuwz:0JZuckXjobvznMV+Ql0mbHOZWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cdd3f667134ad3cda79c81353c37860885bf84c7419da1e9aeb14993850a1a2
Files
-
5cdd3f667134ad3cda79c81353c37860885bf84c7419da1e9aeb14993850a1a2.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dtggqxaq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qedwwrbr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE