Behavioral task
behavioral1
Sample
22202770x0000000000570000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
22202770x0000000000570000.exe
Resource
win10v2004-20230703-en
General
-
Target
22202770x0000000000570000.dmp
-
Size
192KB
-
MD5
3bc920237ab031c6d415c7075e1b5893
-
SHA1
72cb7d9c08d582db8321cf9d895459c0e1f232bd
-
SHA256
ec21d1db1dc50bfe80a9f6717f81d4b8d28710ec57c8ce698d6ef13c843ee53f
-
SHA512
761e8f7301443e6f510e62913e38a97fe583e98fb18f0efaae198e80f1cd95254da36f5bc8b1c1fe8bfed58ce6003417203d0fe5deabcaa5f232de38adc41cdb
-
SSDEEP
3072:AAWi/g1IzuRb5xNAKY73zOyuj++0l8e8hk:Azi/+VCHuyuj++0l
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22202770x0000000000570000.dmp
Files
-
22202770x0000000000570000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ