Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c.exe
Resource
win10v2004-20241007-en
General
-
Target
bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c
-
Size
1.8MB
-
MD5
25ab4e70f03f24ec678b0567de43dbd1
-
SHA1
a7b2e3aeb5f285a59e63301e7bd088472522d0d8
-
SHA256
bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c
-
SHA512
876cd035eeda9efafc69d5bed8823c9b8c80fbd271f43b65f37d367f604d4c5f2503414d2733a16e5d882689387af246ecf67ca5bf9d910efef05b61260bf01a
-
SSDEEP
24576:NCj6auaenjw2qahBxutnG2PRQ3VmlmIoSqHpZve5qyzqMgbHNjNqu0QcIr2F:NTau7zTBxutnnd/qJkULzqu0QX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c
Files
-
bf9f90d33bc9105a3126f0d01e5fff98dafdc83f7d027510100f1b83aad7ba9c.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ticwlotw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xizjhawv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE