Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe
Resource
win7-20240729-en
General
-
Target
a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe
-
Size
52KB
-
MD5
9af13eefa1c43616678857117e2d15c0
-
SHA1
d1d903a3562799fd09997feb404a77797c54a7ca
-
SHA256
a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266
-
SHA512
fd42c3164671c4657073de765ef0a9fbbc41f678aff04fc6ab8527ccd38cc549a6c75fb07afa7f54fe2e17d8343c5ede10c1b87eac81dda4e8b44f89eb2814e1
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCp:KsdXfBo/DBJBGzkP5PCp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe
Files
-
a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
KASANOVA Size: - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KASANOVA Size: 49KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE