Behavioral task
behavioral1
Sample
3236-189-0x0000000000400000-0x00000000009DA000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3236-189-0x0000000000400000-0x00000000009DA000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
3236-189-0x0000000000400000-0x00000000009DA000-memory.dmp
-
Size
5.9MB
-
MD5
5aacc826c010b7d1a08034b03a6e26e3
-
SHA1
fdb136fcc865682b4a6162d9c745b4f01b855c52
-
SHA256
a9df5e8a6f201d53a1bce0e8d372247a40df7886dda784552e11769b35793a91
-
SHA512
2c3859414f44f3cad39e92adab826606e268447e3cbc630807ed4c9594debb00fabea053bd8fbd73dd87dcb2bc9a0318ad3b275a0a601c83fe3d9b4567178801
-
SSDEEP
98304:7zSrlAYtqsIjuvMxLl0+QJOQvWZHaYyLAg1rRTcgeugnR:7uBLJIjn4NsQ+6YyL1fez
Malware Config
Signatures
-
Redline family
Files
-
3236-189-0x0000000000400000-0x00000000009DA000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 126KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rm/�ƕ�� Size: 3268.8MB - Virtual size: 2845.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vydvaekd Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ukmyfpka Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE