Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
New.Inquiry.RFQJanuary2025.pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
New.Inquiry.RFQJanuary2025.pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
17012025_0058_New.Inquiry.RFQJanuary2025.pdf.exe.iso
-
Size
268KB
-
MD5
0f68b567d4cdd2683a4f0e4cbaaf2813
-
SHA1
4b0d43991250e8a59af656caa1ffcc4e2a3dcf7a
-
SHA256
d34f16567afa7ebbc8969cb39c349c4be0d175500506c4ce6c4aad94f5b7d60f
-
SHA512
75f4fa7e5d530f4621251f6638f8db292508cfff12821a4cfd4111b0a19955dc6f58fda12b19ddb09cce13a2ca8d060cc49ddcfdd7e6dd5070df7bc692c04612
-
SSDEEP
6144:6pvCHwyAgQZqhyzapHXGeAqudI3AaJfH:CzqUuZXfSmVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/New.Inquiry.RFQJanuary2025.pdf.exe
Files
-
17012025_0058_New.Inquiry.RFQJanuary2025.pdf.exe.iso.iso
Password: infected
-
out.iso.iso
Password: infected
-
New.Inquiry.RFQJanuary2025.pdf.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ