Behavioral task
behavioral1
Sample
29402060x0000000000340000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
29402060x0000000000340000.exe
Resource
win10v2004-20230703-en
General
-
Target
29402060x0000000000340000.dmp
-
Size
192KB
-
MD5
69b03f17f367a0660030a41e0fdbe3a9
-
SHA1
10d190884876f1f53ddd6c7fa8d0bf890061c77d
-
SHA256
8139c2ccd65284f5671ed16c7f49032ec9491596b160c3dbecb9639d9b4b1e80
-
SHA512
4442dc55b09afc7b41bde1f4fa4fdccebebce819162360a200e03d192e4862ea8fa9bba51d53b20aa6795b899e9dafbca0359c7dd7be1f7e622ae36591cf24b9
-
SSDEEP
3072:LAWi/g1IzuRb5xNAKY73zOyuj++0E8e8hk:Lzi/+VCHuyuj++0E
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29402060x0000000000340000.dmp
Files
-
29402060x0000000000340000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ