Behavioral task
behavioral1
Sample
456830x00000000002A00000x.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
456830x00000000002A00000x.exe
Resource
win10v2004-20230703-en
General
-
Target
456830x00000000002A00000x.dmp
-
Size
192KB
-
MD5
a37939e034279ccc6c609515766984d5
-
SHA1
f4092375ad670ad2f72f5dedfcab6409bf1eebd8
-
SHA256
aa318d4bb2a5b4d9b8755d0cd75b82ba14d0d69ebe9c830f867adca8e1f60933
-
SHA512
a579a8f521667763e9eff543818c6cfe1090ca992914cfb0baceff13067ae0e82579b4ad828bdc12d3b0052872d46973296d8e06fa7df7116263418dfcc714fe
-
SSDEEP
3072:rtE62xyQ6d+VeXdxNLgVK880EHF8e8hK:ZEmOA9S80EHF
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456830x00000000002A00000x.dmp
Files
-
456830x00000000002A00000x.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ