Behavioral task
behavioral1
Sample
2344830x00000000002900000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2344830x00000000002900000.exe
Resource
win10v2004-20230703-en
General
-
Target
2344830x00000000002900000.dmp
-
Size
192KB
-
MD5
3db23d1c062c7bef751feab11907a3a0
-
SHA1
a29109b35ebb1fa613040c389dcd3ede5eec661b
-
SHA256
50536f66cdd2bd4117eb6736a167ade1c7b7771f9a332bd74a45850b59fa7681
-
SHA512
f4bf1a45285b408577b9632f7d88e05e99e9a5007898c2c3a5f678443ecaa5b4c79b3ec40d4bbc2cc1c609739e306d2e39ad16ab5925c49e4853dafcd6e5f44e
-
SSDEEP
3072:AN9zgaHeuGhriktrBxN3kuZ+zdzK8e8hj:O9Ie4rhTodzK
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2344830x00000000002900000.dmp
Files
-
2344830x00000000002900000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ