Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
MV ANNA SCHULTE.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MV ANNA SCHULTE.exe
Resource
win10v2004-20241007-en
General
-
Target
MV ANNA SCHULTE.exe
-
Size
577KB
-
MD5
69e89ef61b383149a0af933abe41b628
-
SHA1
7e84f30ea43e7f5f4d035693b02983061ba423e0
-
SHA256
65fd3e6981e71f5f189ed8496a037d74c05e41af482d0e9f9e649552866fd13f
-
SHA512
731452336944e68d397f6ed63ab12c14bc85c18bdb715443008527a1b2e2ccdda1f87c0adaff2e52f9c9184b707cd2595c5ada435c8be880c706951e69d4084c
-
SSDEEP
12288:ZbRKjP7neZvHStWDjJe4vroUD04OqTV9lQo1GIrrDQLRXPgt:DKjP7eZMWDjkMNlj15sLo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MV ANNA SCHULTE.exe
Files
-
MV ANNA SCHULTE.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 575KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ