Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
8a9a573b71f064e65e33b26bd5ef541eff9ac5e5b8f516c469ca4944e636fe70.exe
Resource
win7-20241010-en
General
-
Target
8a9a573b71f064e65e33b26bd5ef541eff9ac5e5b8f516c469ca4944e636fe70.exe
-
Size
278KB
-
MD5
dd223d2538c382b6728463175ad0d68c
-
SHA1
737eea7628ec4c2c2da8c5890376652778024f64
-
SHA256
8a9a573b71f064e65e33b26bd5ef541eff9ac5e5b8f516c469ca4944e636fe70
-
SHA512
2ad6a30a7f1cb428a5d87c478247322c66dc9f39cab9bbd7fe76db3de4afbe5173d0f6c115162c45138db754f18a9337a140c99bee587ebdf49620d514ec636b
-
SSDEEP
6144:lgRqbGn6NH+qcEDlCC/R4eilAZ88K8snV7mv+Juoq:l+qbGceGlD/yeLZV4A2JuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a9a573b71f064e65e33b26bd5ef541eff9ac5e5b8f516c469ca4944e636fe70.exe
Files
-
8a9a573b71f064e65e33b26bd5ef541eff9ac5e5b8f516c469ca4944e636fe70.exe.exe windows:4 windows x86 arch:x86
0097a273219aa57da7e92f5c432b36d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
shell32
SHGetFolderPathW
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
kernel32
GetExitCodeThread
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedIncrement
IsBadWritePtr
LoadLibraryA
LoadLibraryW
GetCurrentProcessId
AddAtomA
TerminateThread
ReleaseMutex
WaitForMultipleObjects
GetSystemInfo
GlobalAlloc
LeaveCriticalSection
CreateSemaphoreA
EnterCriticalSection
ResetEvent
VirtualAlloc
LoadResource
InterlockedDecrement
FreeLibrary
GetProcAddress
GetThreadPriority
EnumResourceTypesA
SetThreadPriority
CreateMutexA
FindResourceA
QueryPerformanceCounter
CreateFileW
GetPrivateProfileStructA
VirtualFree
LockResource
HeapFree
GetTickCount
GetModuleFileNameW
MultiByteToWideChar
GetProcessHeap
GetSystemTime
GetCurrentThread
ReleaseSemaphore
GetModuleFileNameA
Sleep
lstrlenA
WideCharToMultiByte
IsBadReadPtr
GetLastError
ExitProcess
shlwapi
StrCmpNIA
StrStrA
setupapi
CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 136KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ