Behavioral task
behavioral1
Sample
13002630x0000000000510000.exe
Resource
win7-20230621-en
General
-
Target
13002630x0000000000510000.dmp
-
Size
192KB
-
MD5
6e90a11b688926523e2a5285c134b07d
-
SHA1
3853e759a6aeb4db28165355de72385517efdd63
-
SHA256
8ac01bd8aa33f15c18c3765751ed903a29ef8b25b08773d776b8161102420281
-
SHA512
abb8ef91b8d1a36d27bcc6f94763379cf4aa422f1d868f0f54e943a5275af9425edcb508fe483a9619cc4cafdfb064eb3419b9ca41eec9fddcea9b1d69bbf5cb
-
SSDEEP
3072:7WsCziRmKPvwL/2rSlllF+HxN6AtjJXOj8e8hB:7WHqXwaWlllF+CMXOj
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13002630x0000000000510000.dmp
Files
-
13002630x0000000000510000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ