Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9.exe
Resource
win10v2004-20250217-en
General
-
Target
b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9
-
Size
95KB
-
MD5
b0cea6bb8c1af8a15ad4751e2b060157
-
SHA1
566ab6c2ce245246f5b5e12fc0c966bc3b76e30f
-
SHA256
b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9
-
SHA512
59f5fe1a340b23595121f28eae618fc4c6d210b7b31a27ea68cf6a382827d80b48f15252c8a301e56ac81931fa3fac08b238c1cd868f02cc2d9ca916c8a00c77
-
SSDEEP
1536:kgZZXvp87doW7AHQ1O5GHDnKLqtcioRgCR3JccwsrkoLRQryRVRoRch1dROrwpOH:kqZh87doW7AHyO5KYI/oR9w4e+TWM1dK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9
Files
-
b0f1dd49e0da9b28b92ea18441f33cb0157302c46a76cdecd551cee114788de9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ