Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
12e83b82323d48939373b00da810964eb14b176f112a61437dcc8b83483d789aN.dll
Resource
win7-20240903-en
General
-
Target
12e83b82323d48939373b00da810964eb14b176f112a61437dcc8b83483d789aN.exe
-
Size
724KB
-
MD5
16ff194261d802bb962f116de20281f0
-
SHA1
fe8d67b2362a86ad47bf63abf68ce997cdc42ea0
-
SHA256
12e83b82323d48939373b00da810964eb14b176f112a61437dcc8b83483d789a
-
SHA512
9cd53fbce376a94a99ea197bb2d8376e932e2c8a843708205c8c613492657ed1aa731b4bd4d3cdc1e4be8d3229865af7d0bcdeb655e44fd0f53560785be1ecf7
-
SSDEEP
12288:KO3+ivi0RNOR/5DH2InMtdhtvX2tvJljUWcJxm/Osj3lx7l6X0k97L4HAF3it:7vdvOZ9H2+Mt7tvX2tvJljT/mi1xJ6t6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e83b82323d48939373b00da810964eb14b176f112a61437dcc8b83483d789aN.exe
Files
-
12e83b82323d48939373b00da810964eb14b176f112a61437dcc8b83483d789aN.exe.dll windows:5 windows x64 arch:x64
707bf4d4a84f26baafe3009c556f426e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
LookupAccountNameA
GetUserNameA
InitializeSecurityDescriptor
GetSecurityDescriptorOwner
GetCurrentHwProfileW
wininet
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoA
gdi32
ExtCreatePen
GetBrushOrgEx
GetObjectW
GetViewportExtEx
GetClipBox
GetObjectA
FillRgn
secur32
GetUserNameExW
user32
IsWindowEnabled
DrawFrameControl
FindWindowExA
GetSysColorBrush
urlmon
GetClassFileOrMime
winspool.drv
DeletePrinterDriverExW
kernel32
LoadLibraryA
GetNLSVersion
GetLastError
FreeEnvironmentStringsW
DeleteVolumeMountPointW
GetSystemWindowsDirectoryW
FindAtomW
GetEnvironmentStringsW
Module32NextW
EnumSystemCodePagesW
FindFirstChangeNotificationW
GetThreadLocale
GetConsoleTitleW
Exports
Exports
SLClose
SLConsumeRight
SLConsumeWindowsRight
SLDepositOfflineConfirmationId
SLFireEvent
SLGenerateOfflineInstallationId
SLGetApplicationInformation
SLGetGenuineInformation
SLGetInstalledProductKeyIds
SLGetInstalledSAMLicenseApplications
SLGetLicense
SLGetLicenseFileId
SLGetLicenseInformation
SLGetLicensingStatusInformation
SLGetPKeyId
SLGetPKeyInformation
SLGetPolicyInformation
SLGetPolicyInformationDWORD
SLGetProductSkuInformation
SLGetSAMLicense
SLGetSLIDList
SLGetServiceInformation
SLGetWindowsInformation
SLGetWindowsInformationDWORD
SLInstallLicense
SLInstallProofOfPurchase
SLInstallSAMLicense
SLIsWindowsGenuineLocal
SLOpen
SLReArmWindows
SLRegisterEvent
SLRegisterWindowsEvent
SLSetCurrentProductKey
SLSetGenuineInformation
SLUninstallLicense
SLUninstallProofOfPurchase
SLUninstallSAMLicense
SLUnregisterEvent
SLUnregisterWindowsEvent
SLpCheckProductKey
SLpGetGenuineLocal
SLpUpdateComponentTokens
Sections
.text Size: 608KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ