Behavioral task
behavioral1
Sample
2140830x00000000001E00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2140830x00000000001E00000.exe
Resource
win10v2004-20230703-en
General
-
Target
2140830x00000000001E00000.dmp
-
Size
192KB
-
MD5
f5e1de51894a4a567c415cecd444dbd7
-
SHA1
2daaf7894eed0030d870c6784522cbce91b6a0eb
-
SHA256
63c2d1a850cea1ad59f9e75a4330fd43304625821f481cde9f84319ecbe3633b
-
SHA512
43051de59b30b40c55131f63b3524544381cb383de964d59fa2c23c20496e08a032bc655a833d30d923fcd0bfdd44706660ffe684eb769cfdf6e53fb3b6e2ead
-
SSDEEP
3072:XN9zgaHeuGhriktrBxN3kuZ+zdz78e8hj:d9Ie4rhTodz7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2140830x00000000001E00000.dmp
Files
-
2140830x00000000001E00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ