Behavioral task
behavioral1
Sample
1936970x00000000007D00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
1936970x00000000007D00000.exe
Resource
win10v2004-20230703-en
General
-
Target
1936970x00000000007D00000.dmp
-
Size
192KB
-
MD5
2423a78733e43d58b8cc6ce7b13cf13c
-
SHA1
1b6caac2ea5f9d2a9d330a0ddce979f5b68fc9e1
-
SHA256
89f2b7a3ba30f8ba80e4dc879ec4459b089f99d531c5999bdcc0f06e30261348
-
SHA512
004b8c03e62012eb08d18f6a737593ae68de848946dc56b1b43184aea2ad9ac118c7fe11e5a822383670e1f4424ce8eeafa95ce25d4c479f6354a6b26bfbeb31
-
SSDEEP
3072:GAWi/g1IzuRb5xNAKY73zOyuj++038e8hk:Gzi/+VCHuyuj++03
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1936970x00000000007D00000.dmp
Files
-
1936970x00000000007D00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ