Behavioral task
behavioral1
Sample
14082100x0000000000590000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
14082100x0000000000590000.exe
Resource
win10v2004-20230703-en
General
-
Target
14082100x0000000000590000.dmp
-
Size
192KB
-
MD5
bc4ec069ba1473ebe2628c35c0b15884
-
SHA1
efa9bf96090c9335cdac6dc1065f15562dd4f0f3
-
SHA256
d6ac3b31256099d59525ab6ef031dcfb1e9ba2f52a7187a9391a31ab3bb8ec4f
-
SHA512
5ad885ab58814586c4ccc47b9c487238ee8565185c050ab8a453df442a2b6f74b681c541628e044710816e2b4dd286f9620e6a1e09c08ee30c424a7887813549
-
SSDEEP
3072:NAWi/g1IzuRb5xNAKY73zOyuj++0b8e8hk:Nzi/+VCHuyuj++0b
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14082100x0000000000590000.dmp
Files
-
14082100x0000000000590000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ