Behavioral task
behavioral1
Sample
5721220x00000000003400000.exe
Resource
win7-20230703-en
General
-
Target
5721220x00000000003400000.dmp
-
Size
192KB
-
MD5
2b83c14fd035c1ac5449918bdb68b8c1
-
SHA1
fd38206978e2d2b5d258c55d7d15c6c135e298af
-
SHA256
6c56b6b56ec8b4e9bfa051105d6a4e0d1006e1c2802050902d2185fa788b97b3
-
SHA512
04b577692591faa4034f1069720dea6a499b773f4fe90cf6d28df969f68bbe2589eef1a3d2ab2c2d63fe583eac03c1d59c1ebc19872dd629d8f6cc64a43c34d9
-
SSDEEP
3072:LO64zyFlJDGx0HqSYxNXUfMim4G3z8e8hE:Lf1s0HZ8em4G3z
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5721220x00000000003400000.dmp
Files
-
5721220x00000000003400000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ