Behavioral task
behavioral1
Sample
12841130x0000000000290000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
12841130x0000000000290000.exe
Resource
win10v2004-20230703-en
General
-
Target
12841130x0000000000290000.dmp
-
Size
192KB
-
MD5
9f474437d3431186f640fe15b6c12a68
-
SHA1
916f6399dbfc120ad2f1d7b25abd704c20a66559
-
SHA256
d692f5cba41bfd4fcb633f7a4a6c465d5c9b3c3c9ccbdbedb72be5975ad02ad5
-
SHA512
461ca96bfebad11075fc2e49cd6258097c278079d9eb009551fac70b956682f45fd14f5898b3d7c5d8ef63d528a8d6484e7385b85b42760850e90fe9d65083f4
-
SSDEEP
3072:gnOrlpyS3xp5xN1yJ/4BMzxUdE/j8e8h+:gOf7flBMzxUdE/j
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12841130x0000000000290000.dmp
Files
-
12841130x0000000000290000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ