Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8N.exe
Resource
win10v2004-20241007-en
General
-
Target
f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8N.exe
-
Size
208KB
-
MD5
549264405baa00f4c2f55929f29fb580
-
SHA1
636b8602680407fb04bf33b0ccad690fbf06f8ce
-
SHA256
f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8
-
SHA512
243333766df0d621140a80ad4c1c5ab278fdc622eb6d5177e0fadda642225f742095e2de2659398e6621b0b7ab5451262d752a70f1032ab47958450349caa3f4
-
SSDEEP
6144:VJRDxRqdSqQts6iRZsTZuDbhivDVDN8zqF3:VcjQKUZigDVJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8N.exe
Files
-
f3caab558955808ba1fed486a32e2aad178e98a1534b6b28cc9b7ee5a71ee4c8N.exe.exe windows:4 windows x86 arch:x86
91c8557273d46cefa6ad80b57deb236d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
SetCalendarInfoA
FindResourceA
lstrcmp
GetDateFormatW
SetCurrentDirectoryA
CopyFileA
DisconnectNamedPipe
LoadLibraryA
SuspendThread
GetProcAddress
user32
PostQuitMessage
SetFocus
RemoveMenu
EnumChildWindows
MessageBoxIndirectW
GetDC
LoadMenuW
GetActiveWindow
LoadMenuA
EnumDesktopWindows
RegisterWindowMessageA
GetWindowTextW
EnumDesktopsW
GetClassNameA
LoadCursorA
GetWindowTextA
GetTopWindow
LoadBitmapA
GetMenuInfo
GetCapture
wvsprintfA
SetCursorPos
IsDlgButtonChecked
GetMenuStringW
CheckMenuRadioItem
DestroyWindow
SetActiveWindow
AppendMenuW
GetDlgItemTextW
UpdateLayeredWindow
IsChild
CreateDialogParamW
GetMenuStringA
ShowCaret
GetKeyState
GetCaretPos
GetCapture
CreateWindowExA
CheckDlgButton
GetIconInfo
CopyImage
WinHelpA
CopyIcon
DialogBoxParamA
GetDC
gdi32
GetGlyphIndicesA
GetColorAdjustment
GetTextCharset
GetTextColor
CreatePen
SetSystemPaletteUse
SwapBuffers
GetICMProfileA
GetFontUnicodeRanges
StartPage
CreateDCA
SetWinMetaFileBits
advapi32
RegCreateKeyExA
RegDeleteKeyW
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyW
shell32
SHGetDataFromIDListA
SHGetFileInfoW
shlwapi
PathRemoveBlanksW
UrlHashA
PathIsDirectoryEmptyW
StrStrNIW
StrCmpNA
PathIsContentTypeA
PathAppendA
PathRemoveBackslashA
PathSkipRootA
PathGetDriveNumberW
PathSearchAndQualifyW
ole32
CoUninitialize
inetcomm
HrGetLastOpenFileDirectory
MimeEditIsSafeToRun
EssSecurityLabelDecodeEx
CreateSMTPTransport
HrDoAttachmentVerb
MimeOleGetDefaultCharset
MimeOleSMimeCapsFull
oledlg
OleUIChangeSourceA
OleUIUpdateLinksW
OleUIConvertW
OleUIObjectPropertiesA
OleUIUpdateLinksA
OleUIBusyA
OleUIPasteSpecialA
OleUIEditLinksW
crypt32
CryptStringToBinaryA
PFXExportCertStore
CertCreateContext
CertGetCRLFromStore
CertFindChainInStore
CertFindAttribute
RegOpenHKCUKeyExU
I_CertUpdateStore
CertGetIntendedKeyUsage
CertDuplicateCRLContext
CryptMsgControl
CryptBinaryToStringA
Sections
.ZYkKE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.peSRE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ig Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LI Size: 3KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ