Behavioral task
behavioral1
Sample
1524540x00000000002300000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
1524540x00000000002300000.exe
Resource
win10v2004-20230703-en
General
-
Target
1524540x00000000002300000.dmp
-
Size
192KB
-
MD5
a962fa2a661e97783c9484b2a4499ead
-
SHA1
8611f1d021dbc924c99fbdca8c3b4a276ba39917
-
SHA256
a64a379053c5d677c9df7812c4adabfb79e792faff466f1ee602f6ce46cad8a6
-
SHA512
af6b7bb45276c29d92c442db8ac2c2a8c2764fd7e3a7ae5e597533b0aff3cc8815604a1292df7bc82c0b4a961465d35f6dfe966f316d24b1cd541c9a5bca1391
-
SSDEEP
3072:iAWi/g1IzuRb5xNAKY73zOyuj++0J8e8hk:izi/+VCHuyuj++0J
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1524540x00000000002300000.dmp
Files
-
1524540x00000000002300000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ