Behavioral task
behavioral1
Sample
668830x00000000004500000x.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
668830x00000000004500000x.exe
Resource
win10v2004-20230703-en
General
-
Target
668830x00000000004500000x.dmp
-
Size
192KB
-
MD5
115baa45db9b16584ee8020b835c507c
-
SHA1
d466ded3b054aaf4eac9de21028380f353e128f6
-
SHA256
6d72e37d921719e9ec4a6f85d0ac706d0b508dea80b4a5e8ad728ed484b73756
-
SHA512
36a9eb477c0c8498bd18f9a8e055e46e1326c08472e36abb9c5a79ffd4a23cdb6fbed3aceeef121ad29264382f6465ab6f9d40d1f131bdb5c62c8820e15bf760
-
SSDEEP
3072:WtE62xyQ6d+VeXdxNLgVK880EHQ8e8hK:6EmOA9S80EHQ
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668830x00000000004500000x.dmp
Files
-
668830x00000000004500000x.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ