Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
99f9811f5fb3fb91a99053927aeb83aa27baaa9200f2eefb9d07c77a31e58eaf.exe
Resource
win7-20240903-en
General
-
Target
99f9811f5fb3fb91a99053927aeb83aa27baaa9200f2eefb9d07c77a31e58eaf
-
Size
472KB
-
MD5
81f6e4eefe9a8019c69abf73ac2a2f7f
-
SHA1
fd6c5887114b08a993d653032f39d3a3c8d21bad
-
SHA256
99f9811f5fb3fb91a99053927aeb83aa27baaa9200f2eefb9d07c77a31e58eaf
-
SHA512
77417729229656b55fd4bf154086691163bbf1958dab1d311bd19463465426fa22da96d88aaabb6cb21863ecaf1e92e4a689069abf732270a93e8fac1f4de5c8
-
SSDEEP
3072:2Im8RinudiP52xx67lLdziHDomI0I4RvhO742kAAsmEsR7y+:2KkgiPA6RRPmx1TO745A7MFy+
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99f9811f5fb3fb91a99053927aeb83aa27baaa9200f2eefb9d07c77a31e58eaf
Files
-
99f9811f5fb3fb91a99053927aeb83aa27baaa9200f2eefb9d07c77a31e58eaf.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ