Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Faktura VAT-FV2025013100092_pdf .scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Faktura VAT-FV2025013100092_pdf .scr
Resource
win10v2004-20250129-en
General
-
Target
02022025_1233_Faktura VAT-FV2025013100092_pdf .scr.iso
-
Size
90KB
-
MD5
ec2e5e78cb9f96d6fc884ebe21c2ff78
-
SHA1
f45d6d685598bdf3da6e436fa9b34fa1f33b21ee
-
SHA256
6b1c2144b4fde66439a0632914f1548b922fc251a3889c445d2d68c64c80bb06
-
SHA512
73441246451a96e0eadf178b194b2aedc8b673c7e7ddb499fe5721ef0e65a55d563a167411d9e682a9bbf942027bbebb5b29ab75882a7527a16d77fb042cde20
-
SSDEEP
768:SfEtDBZdaNLXc0oZKNuPYlmwK3xKeL7BykIM:wEtDBZdqLcNgcYYTbBykr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Faktura VAT-FV2025013100092_pdf .scr
Files
-
02022025_1233_Faktura VAT-FV2025013100092_pdf .scr.iso.iso
Password: infected
-
out.iso.iso
Password: infected
-
Faktura VAT-FV2025013100092_pdf .scr.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ