Behavioral task
behavioral1
Sample
661b091e57ffb8d046719989bc5c5cf6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
661b091e57ffb8d046719989bc5c5cf6.exe
Resource
win10v2004-20230220-en
General
-
Target
661b091e57ffb8d046719989bc5c5cf6.bin
-
Size
192KB
-
MD5
661b091e57ffb8d046719989bc5c5cf6
-
SHA1
56a5c061c35dafb42161dacebb17bc8993c9347c
-
SHA256
db698b7837905a152b4a668356e882fdad08b981c0b8d2a00c068c2739810fda
-
SHA512
33b1b9e7557188ebef0c6394ae6cb692e4a2d4d5f663bebb26be7f86432206d9da9992e829d16f7567f2d6ba5ddfb8ebc453950f514050e6d8f5f1495129bb08
-
SSDEEP
1536:oj1dH8Hd36sv0W7T6QJ3rH3yk0I8pDUm46Z92kwk4XNBjkuv23Wfr1zaRXDxv6Vr:oj3KDlRy38i00xNKe/Jq7BoclH8e8hy
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 661b091e57ffb8d046719989bc5c5cf6.bin
Files
-
661b091e57ffb8d046719989bc5c5cf6.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ