Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
o1tz27zvvd.exe
Resource
win7-20241023-en
General
-
Target
o1tz27zvvd.exe
-
Size
521KB
-
MD5
5530bc12643d20c6a8a04217250b7060
-
SHA1
b0339211d2e646438bb46e8619ede30756d043dd
-
SHA256
75839e01d7cefbc61128320ce8ddb7643acd04a4e58e1903a746faea3f9651fc
-
SHA512
d40859281130c205dcf2fe6dd59fc5ae6ecf6ac3134db87211a20e3f088c547df0635c5f891021078d23f2768c1bfa35710cd618307878bdbcc65159c8c9da11
-
SSDEEP
12288:F91VwQAOsgf5vFHa4JLEliXh+OdyB0oMGTeYZFX:KOsgnHDJLEfOdy1dFX
Malware Config
Signatures
Files
-
o1tz27zvvd.exe.exe windows:6 windows x64 arch:x64
ac12cad0c93b558f0d966bcbd3fb79c9
Code Sign
0e:c7:2f:88:4d:ec:6a:e8:9d:eb:63:17:28:f9:73:cb:d7:61:3e:b4:b3:2c:e0:13:13:a4:25:e4:0a:15:df:96Signer
Actual PE Digest0e:c7:2f:88:4d:ec:6a:e8:9d:eb:63:17:28:f9:73:cb:d7:61:3e:b4:b3:2c:e0:13:13:a4:25:e4:0a:15:df:96Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
AddVectoredExceptionHandler
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateFileW
CloseHandle
SetFilePointerEx
InitializeCriticalSectionEx
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapSize
HeapValidate
GetSystemInfo
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetFileType
OutputDebugStringW
WriteConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapFree
HeapReAlloc
HeapQueryInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
user32
EnumDisplaySettingsW
wininet
InternetOpenUrlW
Exports
Exports
?EndSED@@YAPEAXPEAX@Z
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ