Behavioral task
behavioral1
Sample
2136830x00000000003300000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2136830x00000000003300000.exe
Resource
win10v2004-20230703-en
General
-
Target
2136830x00000000003300000.dmp
-
Size
192KB
-
MD5
5dac9505b2ebaa69fd3354efa48a56dc
-
SHA1
ee961b9093dc3e8aea7fbc5c4b61821bd02f110f
-
SHA256
f3a3eed1b529a74398138b3f54be01db098c79b65b701cfffd461941434cc73b
-
SHA512
b6a2a5613b9975dff8d353f0880fc6b64c4f5926431dd76343882cba1aa336344e54adf6c3303925f6a4193c493a4be607f0b1e19d6a70018ccb3ea607de1184
-
SSDEEP
3072:4N9zgaHeuGhriktrBxN3kuZ+zdzk8e8hj:W9Ie4rhTodzk
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2136830x00000000003300000.dmp
Files
-
2136830x00000000003300000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ