Behavioral task
behavioral1
Sample
15481220x00000000005D0000.exe
Resource
win7-20230703-en
General
-
Target
15481220x00000000005D0000.dmp
-
Size
192KB
-
MD5
38be63fc3f009f8f2bce9f67c9cfa319
-
SHA1
026f54b1343e67f03f05f30c35a2f12234022bcf
-
SHA256
56ad8980ef1fbb2e198d5d5ffd2fdd95609a8229da13a6f9ba5a68b0128ff66e
-
SHA512
10554b41654a8591cf473cb1a101fc25efcf29a124170d75f3ba61679f03b112ba862d6be67acdae78ac0658445ddd748a739318a71c65540a71ac3712d4ccf9
-
SSDEEP
3072:dO64zyFlJDGx0HqSYxNXUfMim4G3A8e8hE:tf1s0HZ8em4G3A
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15481220x00000000005D0000.dmp
Files
-
15481220x00000000005D0000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ