Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
99zMain.exe
Resource
win7-20241010-en
General
-
Target
99zMain.exe
-
Size
15.1MB
-
MD5
73b912e98dbc84d5de9398ba4fb42df1
-
SHA1
3cc32b140c23b44abf7c7dbe221267cf408cd3e8
-
SHA256
1bb25dae319c3f9b32f3f462f4db9cd42b0763498cd7c508c4e982aa0b439a68
-
SHA512
5aa26f19f4fd0b249113dc5126cfdf0827846200901bb527e1bcc80cdafb5910edc05f5d7d38868268f1cee045cc900fda75b515a209da5185d4e22664d89749
-
SSDEEP
49152:4Dl4auS+UjfU2T3AIbt+r0A40vN7AWvjZ/:gl4FOjfU2T3NAj15Z/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99zMain.exe
Files
-
99zMain.exe.exe windows:4 windows x86 arch:x86
Password: 1234
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 843KB - Virtual size: 843KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 285KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ