Behavioral task
behavioral1
Sample
2116970x00000000002900000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2116970x00000000002900000.exe
Resource
win10v2004-20230703-en
General
-
Target
2116970x00000000002900000.dmp
-
Size
192KB
-
MD5
39a3d48df6f12325e2e270f30f4e89f6
-
SHA1
71f09128972b071eb7a9fe85c79b64af9bfd4104
-
SHA256
4184b9738dd657c884ba606c199dcb6bf133f13a533f72f320c14ecddcfb7526
-
SHA512
a9d323a618a5f717d88f03b4b366b125a80e68c633b666c032a48c18045b4461521611e468127d5c01592cbcdccfc4fb3ad76599ea5769da949c7d7782026e4e
-
SSDEEP
3072:CN9zgaHeuGhriktrBxN3kuZ+zdzK8e8hj:49Ie4rhTodzK
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2116970x00000000002900000.dmp
Files
-
2116970x00000000002900000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ