Behavioral task
behavioral1
Sample
2172970x00000000003A00000.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
2172970x00000000003A00000.exe
Resource
win10v2004-20230703-en
General
-
Target
2172970x00000000003A00000.dmp
-
Size
192KB
-
MD5
0dc40564298fe6ff39bc540ce53a85c5
-
SHA1
2570765012f1eb72f21f7b69905ff2e96d69a52e
-
SHA256
38f6814040da47e0a0bbbb6e12b55af921a329b06c4be5328259f57a7497bc8e
-
SHA512
26923db6549fda6574ef942e9d852c0f317e3efed7f62a08b7f1dc39b10a4cf1a649026e77a60aecf2de719d761c8e2a155443f1cff96a85376efbd2e4859a51
-
SSDEEP
3072:6N9zgaHeuGhriktrBxN3kuZ+zdzX8e8hj:A9Ie4rhTodzX
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2172970x00000000003A00000.dmp
Files
-
2172970x00000000003A00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ