Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
32887140.exe
windows7-x64
102887140.exe
windows10-2004-x64
32887140.exe
android-9-x86
2887140.exe
android-10-x64
2887140.exe
android-11-x64
2887140.exe
macos-10.15-amd64
2887140.exe
ubuntu-18.04-amd64
2887140.exe
debian-9-armhf
2887140.exe
debian-9-mips
2887140.exe
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
2887140.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2887140.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
2887140.exe
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
2887140.exe
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
2887140.exe
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral6
Sample
2887140.exe
Resource
macos-20241101-en
Behavioral task
behavioral7
Sample
2887140.exe
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
2887140.exe
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral9
Sample
2887140.exe
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral10
Sample
2887140.exe
Resource
debian9-mipsel-20240226-en
General
-
Target
2887140.exe
-
Size
144KB
-
MD5
fead887648bddd70a05cf7a7090411dd
-
SHA1
250c0de3dc100d265ae495f045a2c47dad3520e9
-
SHA256
dfaf75da62d0561d171217fe893bd818a72ebfccd9d7e7f4c046f5b3ca44794e
-
SHA512
e1f15de084a78bf27a1c62b5d0d31fabd10be13983dca05962c40ea1e8b3f7bb617e92f44a78048d3484d16f5d4b9e42bc8c5a4b02fda0e0f5eb69368149920a
-
SSDEEP
3072:buY0LMcTrgw6mo4bnGkbUyh/h39iN/Ko8LdKpZbZo:SY0IkImZUyh/h3MOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2887140.exe
Files
-
2887140.exe.exe windows:6 windows x86 arch:x86
d7854a9aa30702ffeeb9cbadd6e6d19e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
GetPrinterDataW
secur32
DecryptMessage
advapi32
LookupPrivilegeNameA
PrivilegeCheck
GetOldestEventLogRecord
IsTextUnicode
EnumServicesStatusW
winscard
SCardGetStatusChangeW
wininet
GetUrlCacheEntryInfoExW
shell32
ExtractAssociatedIconW
ExtractIconExA
kernel32
GetProcessTimes
GetCommandLineW
WritePrivateProfileStructA
FindFirstFileExW
GetLongPathNameA
IsValidLocale
EscapeCommFunction
EnumSystemCodePagesA
GetSystemTime
GetCurrentThread
GetThreadPriority
GetStringTypeW
WriteProfileStringW
user32
FindWindowExA
GetMenuStringW
GetScrollPos
GetShellWindow
GetFocus
GetDlgItemTextW
IsClipboardFormatAvailable
GetScrollRange
SetTimer
FindWindowW
MessageBoxW
EnumWindowStationsA
GetThreadDesktop
IsWindowEnabled
GetUpdateRect
GetMenuDefaultItem
gdi32
GetTextFaceA
GetTextColor
GdiSetBatchLimit
GetTextMetricsW
GetTextExtentPoint32W
GetCharacterPlacementW
GetStretchBltMode
GetObjectA
GetSystemPaletteUse
GetLogColorSpaceA
clusapi
GetClusterResourceNetworkName
msvcrt
fwrite
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.io Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ