Behavioral task
behavioral1
Sample
1e2a0181d21518700670efd7e1709207.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
1e2a0181d21518700670efd7e1709207.exe
Resource
win10v2004-20230703-en
General
-
Target
1e2a0181d21518700670efd7e1709207.bin
-
Size
192KB
-
MD5
1e2a0181d21518700670efd7e1709207
-
SHA1
6f9d2b6bc0207779e105200dec913541a500de5d
-
SHA256
6e129c2a5a56cddcd001c6a2559cf18b19efdd906643bccc21ed3acffe9a7e0d
-
SHA512
153f43d51b0fdc1318c204299c16f1c97d7354c8ec5c112c737f0f00e89fa0af530f74908e4e5adb35a9314911cb2962178b6a7c7b135edc2db8bb0c80db8d1d
-
SSDEEP
3072:CtE62xyQ6d+VeXdxNLgVK880EHw8e8hK:uEmOA9S80EHw
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e2a0181d21518700670efd7e1709207.bin
Files
-
1e2a0181d21518700670efd7e1709207.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ