Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73N.exe
Resource
win10v2004-20241007-en
General
-
Target
a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73N.exe
-
Size
110KB
-
MD5
3b3eb3247f31be20bf61523eadae85e0
-
SHA1
8e2a29b8c07b27b2f33961d357b38fbad959f411
-
SHA256
a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73
-
SHA512
1ffcd6164e0829bd8ff65089e4b368dfffae1a73ac8111d607c6b430d13b9443294ca110536a2769cea46d26dfe9920e4f828bd3bcf16c2706491313978f2392
-
SSDEEP
3072:wgb/ijm8my0UHMbJaH29jzZykMqtLGmbQ:Vijm8my0UH4J029fZl
Malware Config
Signatures
-
404 Keylogger Main Executable 1 IoCs
resource yara_rule sample family_404keylogger -
404keylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73N.exe
Files
-
a63014e28ee62b7399a3ef1e616e6a23d2918ffc1e2d2ca72c07b1856cc9de73N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ