Behavioral task
behavioral1
Sample
1260540x00000000002700000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1260540x00000000002700000.exe
Resource
win10v2004-20230703-en
General
-
Target
1260540x00000000002700000.dmp
-
Size
192KB
-
MD5
135d01142a332b3b47eb7932793f2215
-
SHA1
c9071d17976a8308ec3a3e45ee53425a007f0536
-
SHA256
866090750e3db0d23d4702980504a3a7e8274cd1956fab918ed169d70e43fe20
-
SHA512
92db0b85cc37a7c22e2170aac8d90a260c65d1687ad17994954d462cef3353d9e9234beb641845a0a327c0edb74653903af6b17b46dfb0d2bb395f287a378608
-
SSDEEP
3072:+AWi/g1IzuRb5xNAKY73zOyuj++0V8e8hk:+zi/+VCHuyuj++0V
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1260540x00000000002700000.dmp
Files
-
1260540x00000000002700000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ