Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2eff58738b5a7717a3fcdf7a4171c6fa18492bc200eddc26bf608fa35d28466e.exe
Resource
win10ltsc2021-20250217-en
General
-
Target
2eff58738b5a7717a3fcdf7a4171c6fa18492bc200eddc26bf608fa35d28466e
-
Size
197KB
-
MD5
d9828d5bbd8818ac94fb7b65891fa969
-
SHA1
45b9f13c9ba87d6199e730f6d863ddde925a0db4
-
SHA256
2eff58738b5a7717a3fcdf7a4171c6fa18492bc200eddc26bf608fa35d28466e
-
SHA512
b3eb5c5958b259c715bbf67eff54b995f73c543e3b65d7b54a51c7377d2b1ff6553950dfca8593e90e98d641b99dbfb86931d2a054eb4225ac0be4bbc9d0440c
-
SSDEEP
3072:UjVZw9zj+3objKhZHUsitUQobeUXnR51Y4:MEx+39hPitUfXZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eff58738b5a7717a3fcdf7a4171c6fa18492bc200eddc26bf608fa35d28466e
Files
-
2eff58738b5a7717a3fcdf7a4171c6fa18492bc200eddc26bf608fa35d28466e.exe windows:5 windows x86 arch:x86
4a00232bbc128407226b904b78ef234b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesW
OpenFile
WritePrivateProfileStructA
TlsGetValue
SetLocalTime
_llseek
DeleteVolumeMountPointA
WaitForSingleObject
OpenSemaphoreA
CallNamedPipeW
SetTapeParameters
GetProcessPriorityBoost
LocalFlags
ReadConsoleW
WriteFile
GetCommandLineA
SetCommTimeouts
InitializeCriticalSection
FindResourceExA
LoadLibraryW
_hread
GetVersionExW
SetConsoleMode
WriteConsoleW
GetTimeZoneInformation
lstrcatA
GetBinaryTypeW
lstrlenW
GlobalUnlock
FillConsoleOutputCharacterA
DeactivateActCtx
CreateJobObjectA
InterlockedExchange
GlobalUnfix
GetLastError
IsDBCSLeadByteEx
GetProcAddress
BeginUpdateResourceW
CreateNamedPipeA
SetVolumeLabelW
LoadLibraryA
OpenMutexA
LocalAlloc
SetConsoleDisplayMode
AddAtomW
SetCurrentDirectoryW
SetFileApisToANSI
PostQueuedCompletionStatus
WriteProfileSectionW
GetPrivateProfileStructA
GetTapeParameters
WaitForMultipleObjects
EnumDateFormatsA
GetThreadPriority
LoadLibraryExA
GetConsoleCursorInfo
ScrollConsoleScreenBufferA
SetCalendarInfoA
lstrcpyA
FileTimeToDosDateTime
DisconnectNamedPipe
GetSystemDefaultLangID
InterlockedIncrement
InterlockedDecrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetCurrentProcessId
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
CreateFileA
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
GetModuleHandleA
gdi32
GetBoundsRect
GetBitmapDimensionEx
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 91.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ