Behavioral task
behavioral1
Sample
1340-265-0x0000000000BA0000-0x0000000000BE0000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1340-265-0x0000000000BA0000-0x0000000000BE0000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1340-265-0x0000000000BA0000-0x0000000000BE0000-memory.dmp
-
Size
256KB
-
MD5
2f65980666f19bfe6c9e5a019bdba338
-
SHA1
4ec74a7f9753c845c1124a45a947c1b895d68bb8
-
SHA256
14b642ecb057e2db27ef54b0ca1cbdb5fbd667c4059fea293dede0ffafb59d1a
-
SHA512
a7695cb621d1763949e4be70af2f50cb06ed5af59d8359e971d166d7db5630678695b55d86317600965fc47308527af2e3d31de0d7d8a2510f087021318e917d
-
SSDEEP
3072:26tDiwyqSVghBdZ+q6hVbwIxxiIDg8qAxNKcbMhQ4k9/8e8hi:NibuhHZ+q6P7ihjB654k9/
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1340-265-0x0000000000BA0000-0x0000000000BE0000-memory.dmp
Files
-
1340-265-0x0000000000BA0000-0x0000000000BE0000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ