Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8.exe
Resource
win10v2004-20250217-en
General
-
Target
6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8
-
Size
43KB
-
MD5
555c61ebdb63070649f09ace6619d08c
-
SHA1
db4b7e11ef770daa117b2a9ca6c1595c5c50ceef
-
SHA256
6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8
-
SHA512
c15c21a3a45a363cf4615e5b4dd3cfe52543efa3f5917e85f89382d7b6dc538dcdeedb3cc27b3264478d007b1b2201a192b9ae6afd4e1f1f2fd9e290130b94b8
-
SSDEEP
768:BtMKlfQsJ3r7flElGeRHHs+Pp9rIpp5MRtYpHZEbyPBnh+2xzha5:1hJ3f+JRHM+ByMR8+mPBUs
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8
Files
-
6e3a89ffa66710431aba08abfe475de6662fa5bc260dfd1b6b03fcf0cee821c8.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE