Behavioral task
behavioral1
Sample
21042720x0000000000450000.exe
Resource
win7-20230621-en
General
-
Target
21042720x0000000000450000.dmp
-
Size
192KB
-
MD5
793ad588b376d8988d363704aa837716
-
SHA1
f2e031349a43394d01eb4a3f048016c981fd5c84
-
SHA256
5bbc8c19d66855e76fc55ee66d1385efad58a24becd9098153dc677326ce1da5
-
SHA512
7dacdfb2c3f29825f12ce4b81de58862711ac283753a124311dc4d0b27336b13ba017e4856f138fbff59ea28310c759dbb12e5460c2eef8ba5086bdb2fe5dc45
-
SSDEEP
3072:7BsCziRmKPvwL/2rSlllF+HxN6AtjJXOP8e8hB:7BHqXwaWlllF+CMXOP
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21042720x0000000000450000.dmp
Files
-
21042720x0000000000450000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ