Behavioral task
behavioral1
Sample
2220970x00000000007D00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2220970x00000000007D00000.exe
Resource
win10v2004-20230703-en
General
-
Target
2220970x00000000007D00000.dmp
-
Size
192KB
-
MD5
ecd57a7b9882bc84e3cdec6f8976d4ed
-
SHA1
6b60929c165797f47df88dfcfb09e547e5bca612
-
SHA256
6f3dca95cb2a8c397a700fd410e1f038809a5861300eefdb37173579aa6dfcea
-
SHA512
cd09ff2c85fa39d607bf5c200a253821c58a250a13778f00d519c20a6e039ae7f68b47c48be8553eb504f0806b59707e8dc9bbbdca6f8fefb46a9e78b1b5bea0
-
SSDEEP
3072:lN9zgaHeuGhriktrBxN3kuZ+zdzu8e8hj:L9Ie4rhTodzu
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2220970x00000000007D00000.dmp
Files
-
2220970x00000000007D00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ