Behavioral task
behavioral1
Sample
2408820x00000000003600000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2408820x00000000003600000.exe
Resource
win10v2004-20230703-en
General
-
Target
2408820x00000000003600000.dmp
-
Size
272KB
-
MD5
c303241a148b1480c5214f5b6be2758f
-
SHA1
573e3f3de0946ebbb2f5dd34f09de7492f5ce5e9
-
SHA256
d99b7ae28ecff17a46cc4a03fcace99e82e1d8ae6d79330dd8e5433c41927fa5
-
SHA512
1aa84fb152aa586714e965dc4916f216e59a55326e01a390d1325d40be2af07f3eb6ba0ab04cfb0923cdb93ddc558b2f058f9b824349d66f5b0f99162042acf5
-
SSDEEP
1536:SaqXQzahmtnTT17KLeFq8sbLtuUI29+xn5MOZbV7cfaVPEkMJrF:3qXz0TdKUqPPth+xbBqiKkArF
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2408820x00000000003600000.dmp
Files
-
2408820x00000000003600000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ