Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    45.76.36.1322.zip

  • Size

    5.1MB

  • MD5

    ffb2c9f84f4f87da08a37274772e83e8

  • SHA1

    ad2775463db1fddd6aaa0855c2329452bc81f360

  • SHA256

    9197c2396decf8ef116ed4027a6760294fb46be2ec3958915407a3846a3be9ce

  • SHA512

    2468ae575c078e8025a7523179aa94ba9fee17b77e2f3eda6b301f51ec720eff48ae290e3517ae0925efe8d4ee9f670468894385581fc4479397bf2a625e2f03

  • SSDEEP

    98304:IdquOS2c8SSB1RiK6NZ0GDT/5wsgerXQoRBpby1iFeD8aPY7lfTN:gOSFgRiKKZ0GDNqeUo3CiMD8FJfB

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45.76.36.1322.zip
    .zip
  • 45.76.36.132 2/AudioCapture.dll
    .dll windows:5 windows x86 arch:x86

    b8a1db56beebf8e839dde8e0df72f492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/NSM.LIC
  • 45.76.36.132 2/NSM.ini
  • 45.76.36.132 2/PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    e05a5a3d0a2f8611baa7485a20209a99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/PCICL32.DLL
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 45.76.36.132 2/TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    cfc186af89cec277c7bb366cb372731e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/client32.exe
    .exe windows:5 windows x86 arch:x86

    a9d50692e95b79723f3e76fcf70d023e


    Code Sign

    Headers

    Imports

    Sections

  • 45.76.36.132 2/client32.ini
  • 45.76.36.132 2/htctl32.dll
    .dll windows:5 windows x86 arch:x86

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/nskbfltr.inf
  • 45.76.36.132 2/nsm_vpro.ini
  • 45.76.36.132 2/office.lnk
    .lnk
  • 45.76.36.132 2/pcicapi.DLL
    .dll windows:5 windows x86 arch:x86

    c09dcd07c8e93b972e6530c73f8ec4bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 45.76.36.132 2/remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections