Behavioral task
behavioral1
Sample
15001280x0000000004950000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
15001280x0000000004950000.exe
Resource
win10v2004-20230703-en
General
-
Target
15001280x0000000004950000.dmp
-
Size
256KB
-
MD5
50d5241bbf2bdd37b742185ee9075b95
-
SHA1
06f2ec2a4a2b0d8ebd31614d69d150ba7a4e4fa0
-
SHA256
ceaf7d81ec3f1195558ba5e512dbc0e6a3568c5c3a2c6d3b29ba05ddddf3a6bf
-
SHA512
c6f8376888d48e858cb0f9925f7c6aa2ee1c24abe159f7935c1094f66b3d328ef8e6db51401b654815579e24c3596315154d15fde340c31794c00861e66a95c3
-
SSDEEP
3072:UAF5KBstbkeiAF5KBstbkegAF5KBstbkeNKZIhDDxNcaoMczC7:xXb1XbzXb33hDYjy7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15001280x0000000004950000.dmp
Files
-
15001280x0000000004950000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ