Behavioral task
behavioral1
Sample
2080970x00000000003C00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2080970x00000000003C00000.exe
Resource
win10v2004-20230703-en
General
-
Target
2080970x00000000003C00000.dmp
-
Size
192KB
-
MD5
87e3a5cf49c6f781b9c9110c8a4052d0
-
SHA1
871935611a76bee8572e2b034c02779fce52b436
-
SHA256
d83f2483aca8e5db4ab337cafe7708444761a5398c7859964ba7111391b62649
-
SHA512
d3d9462f36dcceb2117d0172141f0bed6b5ef6fb42797b9eb7141d241ae2e5c2e1b0d6b5ea998ea1b08b885ed652e25cb4b19e41da5d06fc0ef2e3d9d132484b
-
SSDEEP
3072:rN9zgaHeuGhriktrBxN3kuZ+zdzx8e8hj:x9Ie4rhTodzx
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2080970x00000000003C00000.dmp
Files
-
2080970x00000000003C00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ