Behavioral task
behavioral1
Sample
1508830x00000000004E00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
1508830x00000000004E00000.exe
Resource
win10v2004-20230703-en
General
-
Target
1508830x00000000004E00000.dmp
-
Size
192KB
-
MD5
dc954cd8c2806acde094c2a3db6aa1b0
-
SHA1
403421a72c3b3a100913f6eaff5829253494f093
-
SHA256
fc314028f1e2167f36a5c79eb3036063539e136baf89741c2184675220d5bf90
-
SHA512
aa81e0226e72faa2242dc6c5c7be2fab5e7b474ff8efd03efe49d20f226880ef8349f5a2c0932e4d7347e3be20327ae46e9617673bbe862bc483b21448c18aa3
-
SSDEEP
3072:ktE62xyQ6d+VeXdxNLgVK880EHp8e8hK:cEmOA9S80EHp
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1508830x00000000004E00000.dmp
Files
-
1508830x00000000004E00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ