Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
0d43ad0f86342f01b23b7c51901845c73743a73e6d2a674ef382db8ec1ecb1ce.exe
Resource
win7-20241010-en
General
-
Target
0d43ad0f86342f01b23b7c51901845c73743a73e6d2a674ef382db8ec1ecb1ce
-
Size
1.6MB
-
MD5
01ca67a0af141e7796b09be6e55676ea
-
SHA1
ef819c8d2d82dc12a997afa9f3c3c4551bb0d97d
-
SHA256
0d43ad0f86342f01b23b7c51901845c73743a73e6d2a674ef382db8ec1ecb1ce
-
SHA512
c835ffcf003cb831c70b7f363d73dd5197a5711f76ac7ea89df05b83f474923c8a3aa90f3bbc3cb989901fb17494f2ff69e72a61a42a2af43180cf17f5b14e8a
-
SSDEEP
24576:w5/eSiVIGhlnOjnUPE75vXQIt1tyDtVSZTfdubxgmVMghkQmcUpQpKkPcIr4Qgko:34N54A1tAtOf2RVMn2UUJrjRqVL64E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d43ad0f86342f01b23b7c51901845c73743a73e6d2a674ef382db8ec1ecb1ce
Files
-
0d43ad0f86342f01b23b7c51901845c73743a73e6d2a674ef382db8ec1ecb1ce.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztgakxwr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjqgmkri Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE