Behavioral task
behavioral1
Sample
580830x00000000002900000x.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
580830x00000000002900000x.exe
Resource
win10v2004-20230703-en
General
-
Target
580830x00000000002900000x.dmp
-
Size
192KB
-
MD5
fb3ac5932067e35d7c83d5dcc4acda5b
-
SHA1
8896e297f5b1ba704e80efa368af953d687ea672
-
SHA256
e7f040e546a52856e8628633030c64cdf642cb122be0de53744363fcbaf4dc49
-
SHA512
fb1ef427857ac659a2281076135b200101111a82a89dfd6a96021f22ceb8ed9a829c85264a4c67bcc48e4ee28a6bbff2a5cd5090dd2c0bf0a9aa8947f57df0e9
-
SSDEEP
3072:NAWi/g1IzuRb5xNAKY73zOyuj++0L8e8hk:Nzi/+VCHuyuj++0L
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 580830x00000000002900000x.dmp
Files
-
580830x00000000002900000x.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ