Behavioral task
behavioral1
Sample
11881230x0000000000290000.exe
Resource
win7-20230621-en
General
-
Target
11881230x0000000000290000.dmp
-
Size
192KB
-
MD5
76fecaf793f53b99d4aa16b3e5ce25b9
-
SHA1
6e3101dfb991dd8586e416f1d10957d21c6936e1
-
SHA256
98d5e31eeb4a546bcf1660d89ce81f423e80752b13b5baa9ca922a89c3d92c84
-
SHA512
8412d90b92a4305b23d5aa286fc5c3105663c94cf390f79720126c24059fdd45bf78a7d43e9f6c73ed5a49c2ad64a0d4e1b7077a09a0dfdf96f6c9b0a8b4e61d
-
SSDEEP
3072:dUUEa9Te3JQBf8td3/oxN1ULH0tyo8e8h4:+7QRyi1tyo
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11881230x0000000000290000.dmp
Files
-
11881230x0000000000290000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ