Behavioral task
behavioral1
Sample
21761220x00000000003A0000.exe
Resource
win7-20230703-en
General
-
Target
21761220x00000000003A0000.dmp
-
Size
192KB
-
MD5
0e22fe8bab721d1ae696ea8343e102a9
-
SHA1
5fc8733ec38ec9b6ce57656b905990591d87b887
-
SHA256
31f7d4cf11333854a04c8072943bcd47412e9ab00bab4f867f8e6b95f89d589b
-
SHA512
c10281ee1761857ad966bb81b0f119162d3838f7c8552807f1f2b4d9348487dd241c6cd7a08ac0327450cf9416f050dbb304f2acb845ea5226cecd1d352751e1
-
SSDEEP
3072:/O64zyFlJDGx0HqSYxNXUfMim4G3N8e8hE:nf1s0HZ8em4G3N
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21761220x00000000003A0000.dmp
Files
-
21761220x00000000003A0000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ