Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27.exe
Resource
win10v2004-20241007-en
General
-
Target
aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27
-
Size
1.8MB
-
MD5
1d347b2007eb465b8a6b60e04e2f1eb1
-
SHA1
cab8b0c2195b530284178c584c259f3be7609459
-
SHA256
aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27
-
SHA512
964896975d7cadf336acba1779664dd2035a5693c9b03831f57ff99c7be01779bdc754e3f53c36905a88aaa75fbc6f88f01ee2cf480f1f47d033c1e921018339
-
SSDEEP
49152:C8Eb3WwhRSjba010L4Vjl+jnfiXuoryocesmk:apMbaAVjczIC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27
Files
-
aa7218dd05b2c00fc9c452f8e1b6da4a2f7a9cc28159e885978338572389ef27.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgbxbeuy Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
weukimka Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE