Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
59115436fd88ec202e7e6db71fb455ca1c54b6875f44f292af79d096745e70f3.exe
Resource
win7-20240903-en
General
-
Target
59115436fd88ec202e7e6db71fb455ca1c54b6875f44f292af79d096745e70f3
-
Size
1.7MB
-
MD5
7055b335d750376e2fe29a4a5445fac1
-
SHA1
f49c34d963b326168cea91e79b138a79fbb7974b
-
SHA256
59115436fd88ec202e7e6db71fb455ca1c54b6875f44f292af79d096745e70f3
-
SHA512
3b338efa359814e4bb1285a86bb965ceb4f9b8068a0247bc4e89a6352052e0c9f4d46e1cf29e0692652a0b8fd98bdf618f878deebcb9d8d0fe96e346568c2681
-
SSDEEP
24576:CAPigEsBWbT2W4nYDe9JmiKSUrvjCYKrEL7lz+dkRalY0qQAdMC:CANrBWmVnYC3miKScRKrSlzI21QAd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59115436fd88ec202e7e6db71fb455ca1c54b6875f44f292af79d096745e70f3
Files
-
59115436fd88ec202e7e6db71fb455ca1c54b6875f44f292af79d096745e70f3.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
baihwztk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dykjeqhy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE