Behavioral task
behavioral1
Sample
22282740x0000000000590000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
22282740x0000000000590000.exe
Resource
win10v2004-20230703-en
General
-
Target
22282740x0000000000590000.dmp
-
Size
192KB
-
MD5
9c895e03f916a125ed804ea346aacd1f
-
SHA1
71f9e0b8781919b6d2516b9f65965603fcae3b2f
-
SHA256
c045d749cf0b950077ab80d405eece43b0a50b2a6067ece21ee8b0334047e7f6
-
SHA512
fb7e43f3ba567c3b75e15686fd971860c03ff5dc2580fc444ef014abbe49fe897236f51cc0b65d3cabf8840facaa1997dcc3436468ea219fd5dc509988fd53b0
-
SSDEEP
3072:LAWi/g1IzuRb5xNAKY73zOyuj++0b8e8hk:Lzi/+VCHuyuj++0b
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22282740x0000000000590000.dmp
Files
-
22282740x0000000000590000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ