Behavioral task
behavioral1
Sample
1452830x00000000003200000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1452830x00000000003200000.exe
Resource
win10v2004-20230703-en
General
-
Target
1452830x00000000003200000.dmp
-
Size
192KB
-
MD5
b168db942a6d45542001d87196c41c02
-
SHA1
0e0da502c49d1ab74699191863b2551407a8b98b
-
SHA256
b82cfd229305a54c62257ece5a723c769affff4c23c5619d4f446ae70af8409d
-
SHA512
73cc83cdf5241003c424f7285a69b30ef126446543076671d7dc7c7bced9d589586ad3e6b010e4f24a26795f71d209f1cdc389616ed865895e32ec1f72190d47
-
SSDEEP
3072:3tE62xyQ6d+VeXdxNLgVK880EHt8e8hK:dEmOA9S80EHt
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1452830x00000000003200000.dmp
Files
-
1452830x00000000003200000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ