Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
zamówienia 31012025DJ ZK 25010325_pdf .scr
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
zamówienia 31012025DJ ZK 25010325_pdf .scr
Resource
win10v2004-20250129-en
General
-
Target
02022025_1558_31012025_zamówienia 31012025DJ ZK 25010325_pdf .img
-
Size
90KB
-
MD5
b492fbad6fcf1a52a6885ecd90f82fad
-
SHA1
090823f6ecc336016f73be97453e799aad0fec2d
-
SHA256
2e06804809b8ab5372347740576ab0d8db7212d487118470f30aec3d1845ff74
-
SHA512
dbb1f3be92f9f66a7201e9bc7636023ca1ef05b28b8a5a093efa791722ad622da722dd1813cf87dbe89118fc762a37eafddc8d2c103dc8cd1b463fc6d227cf65
-
SSDEEP
768:Nhj8tDJhV6NTXJabo47/5xxwHBfKuL7BykI8:Nx8tDJhVKjJabog5/SXBykb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/zamówienia 31012025DJ ZK 25010325_pdf .scr
Files
-
02022025_1558_31012025_zamówienia 31012025DJ ZK 25010325_pdf .img.iso
Password: infected
-
out.iso.iso
Password: infected
-
zamówienia 31012025DJ ZK 25010325_pdf .scr.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ