Behavioral task
behavioral1
Sample
1380830x00000000003C00000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1380830x00000000003C00000.exe
Resource
win10v2004-20230621-en
General
-
Target
1380830x00000000003C00000.dmp
-
Size
192KB
-
MD5
a8a4c97414df4a934f4067e30a88f35c
-
SHA1
0aebc6bbe68c9435eb01b0983e06df1a1287bf1f
-
SHA256
055bff9cfb5d11f24553f5dedb6959230ef2104ab5c5b4a7b6d5d9d669925eb2
-
SHA512
0f08517ae1080b5f1ccb587b7e6f1da1f825ad4e03d76b177195b4dfc385d2199094e8595ec3ba104976b3885a7f01a801ec48f7e47a7d27276363e549439c5c
-
SSDEEP
3072:YtE62xyQ6d+VeXdxNLgVK880EHT8e8hK:IEmOA9S80EHT
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1380830x00000000003C00000.dmp
Files
-
1380830x00000000003C00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ