Behavioral task
behavioral1
Sample
7561230x00000000002500000.exe
Resource
win7-20230621-en
General
-
Target
7561230x00000000002500000.dmp
-
Size
192KB
-
MD5
c480a049f88fe5388c16ece7b0880aff
-
SHA1
204b377a96fb15dd5146eab9008c9dcb1202e003
-
SHA256
72d80fd19f7cb28089ce4a37d4250e6903ad00dd09e1ead3fd596ae46ebec8ba
-
SHA512
b640ba9b21efabc69b8507d6c4666d613e51a9e898e1c86c75de76601f85c66f47c4bdfacb8cb014a3fb915d7c317270e2f0ad48c1bba521160dc99bc566b311
-
SSDEEP
3072:PUUEa9Te3JQBf8td3/oxN1ULH0tys8e8h4:87QRyi1tys
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7561230x00000000002500000.dmp
Files
-
7561230x00000000002500000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ