Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95.exe
Resource
win10v2004-20241007-en
General
-
Target
bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95
-
Size
4.5MB
-
MD5
84f2ddec7d3b7621f02776ad79b64e61
-
SHA1
b9fa3a3dabd8d64b958d8902f0bc77dd1d2385b8
-
SHA256
bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95
-
SHA512
8242bdff6dac52cc4773b19b1928fd6792f99956760dc17d563394b573c0d81ef4349d1924bb4147d5425da9a558c54665e2de5eb9dd18669c8c0e8aff72aab6
-
SSDEEP
49152:VZ4I/q2ksAuo5UonKzwjHP7iF0u3xl9hCY:DzXksFfoK8z7/aVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95
Files
-
bd557b12ae1380c61a6bb5c5edefa17b62463d918928fb0c884d1a55a70dbd95.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 446KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ