Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
a1437e49b0077b82a3ccb0811d776c466b45482dbccd7598a271805535ea1a2f.exe
Resource
win7-20240903-en
General
-
Target
a1437e49b0077b82a3ccb0811d776c466b45482dbccd7598a271805535ea1a2f
-
Size
80KB
-
MD5
69ad0749529bcc291469e8e86d3b822c
-
SHA1
1a9a2cdc4547e97333af37345b34d9096ea4e055
-
SHA256
a1437e49b0077b82a3ccb0811d776c466b45482dbccd7598a271805535ea1a2f
-
SHA512
57ff8fb88887555df2d596f2de9c5d0950d51d85c0e32d2194a5b513b0c853aee0273877b0c168c6861f23873555911938c9d687af8c1a15ab6b6c8958304a7b
-
SSDEEP
1536:uzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcl:8fMNE1JG6XMk27EbpOthl0ZUed0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1437e49b0077b82a3ccb0811d776c466b45482dbccd7598a271805535ea1a2f
Files
-
a1437e49b0077b82a3ccb0811d776c466b45482dbccd7598a271805535ea1a2f.exe windows:4 windows x86 arch:x86
908e67f8b0160bfd82132ad8738bb56b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
atl
ord47
gdi32
BitBlt
gdiplus
GdiplusStartup
msimg32
AlphaBlend
msvcrt
atoi
ole32
CoInitialize
oleaut32
SysAllocString
shell32
DragFinish
shlwapi
StrToIntExA
user32
GetDC
wininet
InternetOpenA
Sections
.MPRESS1 Size: 67KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE