Behavioral task
behavioral1
Sample
920550x00000000000F00000x.exe
Resource
win7-20230621-en
General
-
Target
920550x00000000000F00000x.dmp
-
Size
4.5MB
-
MD5
e6d6ddc8de48707baaa6770b34f65d3c
-
SHA1
7f0450fa767ffa70f5c2efb55ffe226118da777b
-
SHA256
34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f
-
SHA512
7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea
-
SSDEEP
49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX
Malware Config
Extracted
redline
Z
n57b30a.info:81
-
auth_value
907a217c291f74c1a111fc9371fe2803
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 920550x00000000000F00000x.dmp
Files
-
920550x00000000000F00000x.dmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE