Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Solara.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
Solara.exe
Resource
win11-20241023-en
General
-
Target
Solara.exe
-
Size
13.5MB
-
MD5
6ca6ea858de3f4203df8b8c5c218ad17
-
SHA1
71a0778b88469b8a62e472f8827465e2e68fbec6
-
SHA256
421ed8931f574d6dcc86eb7fa2fbb0fc9069aebf22dbc0c4c0f341c7864d3784
-
SHA512
e6324cd5c130e86038666ed4882a4a7f37f168c771bf6ef86aed19eb6733c2a8a875a01271cd1d82d193c665dbaaf6e21cf12c2ced18d20a1cfb2712f9e0ff00
-
SSDEEP
393216:NsEANEX3gBGYVwwoE0VhUqE7SlO9h4m/a360m:NhIEX3kGN/XBEWs4EA60m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Solara.exe
Files
-
Solara.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13.5MB - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ