Behavioral task
behavioral1
Sample
1728540x00000000002400000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1728540x00000000002400000.exe
Resource
win10v2004-20230621-en
General
-
Target
1728540x00000000002400000.dmp
-
Size
192KB
-
MD5
1e53505f0c95fa26e5b8b2e8e368c1b3
-
SHA1
4881f10c3558882ab29a56b5a38418a87d9dbc2e
-
SHA256
8c3ace05fc2bb90a60f745e7f58b3f8cf2f5ba74b444fca9ca572121619cf487
-
SHA512
2891699590c704d08b47ca9c6c36e83ef0064c7a1f5af73e4e624b5162b0e3d8fd84072b4d30502afcd16f621343c89792cac13c76b1954934ad80223aa987e7
-
SSDEEP
1536:xgKedNi036sv0W7TWKygyvHWlLRsBChShr1xNQlYQ/nbux+vlYroYl0GkRU8e8h4:xAIGPVd2CKr1xNHOVvWroYln8e8h4
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1728540x00000000002400000.dmp
Files
-
1728540x00000000002400000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ