m
uko
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
2025-03-14_bf34dec9a90f3c47c27fdd1db698cf72_spora.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-03-14_bf34dec9a90f3c47c27fdd1db698cf72_spora.exe
Resource
win10v2004-20250217-en
Target
2025-03-14_bf34dec9a90f3c47c27fdd1db698cf72_spora
Size
253KB
MD5
bf34dec9a90f3c47c27fdd1db698cf72
SHA1
1fdb345eaa9fe23dad4b41a91763d30255c353fc
SHA256
9cedba37d503355ec37b078fda147420aa4522f14effa0af3651e3c5b7de199a
SHA512
73835574fd09ce094ea6dd17c79cb8ceca3644bbeb8939b51f7777eb25053dc1e570e0a45dee2e0e05f13c2a5492235f11d3453ceb6bb8ce299a9f3acfb77e35
SSDEEP
6144:7sYHsYbC8qIdNjv5Umv0578PJc4R4o9HiT24dXHOx6SyLILYADousy:7THTRdNjBUmM+PJc4RzHZ4dXWfYAht
Checks for missing Authenticode signature.
resource |
---|
2025-03-14_bf34dec9a90f3c47c27fdd1db698cf72_spora |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ResUtilGetBinaryValue
ResUtilDupString
ClusWorkerCreate
ComPlusMigrate
CoRegCleanup
SetSetupSave
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA
NDdeShareGetInfoA
NDdeShareEnumA
Ctl3dGetVer
Ctl3dUnregister
Ctl3dRegister
Ctl3dEnabled
Ctl3dCtlColor
SHFree
SHBrowseForFolderW
StrChrA
DragQueryFileW
ShellExecuteW
SHGetMalloc
SHCreateDirectoryExA
SheChangeDirA
ExtractIconA
SHGetDataFromIDListW
StrStrW
SHGetFileInfoA
SHGetFolderPathA
GetProcAddress
SetLastError
WaitForSingleObject
WriteProcessMemory
lstrcmp
OpenJobObjectW
FindClose
GetDateFormatA
WriteConsoleA
GetStringTypeW
CreateFileW
SetEnvironmentVariableW
GetPrivateProfileStringW
GetModuleHandleA
GetCommandLineW
SetErrorMode
CreateMailslotA
m
uko
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ