Behavioral task
behavioral1
Sample
12401230x0000000000260000.exe
Resource
win7-20230621-en
General
-
Target
12401230x0000000000260000.dmp
-
Size
192KB
-
MD5
da04f6055b0c9eef3dc73c9ff61c7a2f
-
SHA1
3a2d19d627c18034dbbec84d90b16e4d9a8f69d8
-
SHA256
6b502fe0e44133b1941a38e9f77d3eb35d0ec45a3fbdee675198afe77988ff1b
-
SHA512
d0d83318961a005b4b6efe61d1c29589f8159ab41946231d269ecdb1003e25b63deabc45ef679079a98d8f271c6d08418fd196f5d9a27bdd32db1d3574ce8214
-
SSDEEP
3072:QUUEa9Te3JQBf8td3/oxN1ULH0tyt8e8h4:z7QRyi1tyt
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12401230x0000000000260000.dmp
Files
-
12401230x0000000000260000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ