Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
71c7232704f53e3ff80ca0604f727cfba7354da5149daebc333850d1997d9db0N.exe
Resource
win7-20241023-en
General
-
Target
71c7232704f53e3ff80ca0604f727cfba7354da5149daebc333850d1997d9db0N.exe
-
Size
1.9MB
-
MD5
9d27865f086e96f1d49b067a626d60b0
-
SHA1
2d7cea51caa1dbee60f116a8a73d58890aed3aba
-
SHA256
71c7232704f53e3ff80ca0604f727cfba7354da5149daebc333850d1997d9db0
-
SHA512
e436477d455445d32acf94376721c262db3fe599be75ac496fd1e19e87878b5fa0b5ceeb8b2cc626e502f994992d16826727356275c43c6c1cee89a776c6c3ec
-
SSDEEP
49152:syJ84D48lFk7Ack1DvqO/XnH6RZIMpCmT+dI:syJ84sweGmgH6RtC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c7232704f53e3ff80ca0604f727cfba7354da5149daebc333850d1997d9db0N.exe
Files
-
71c7232704f53e3ff80ca0604f727cfba7354da5149daebc333850d1997d9db0N.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
geefwset Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hjfrfflt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE