Behavioral task
behavioral1
Sample
24481220x0000000000260000.exe
Resource
win7-20230703-en
General
-
Target
24481220x0000000000260000.dmp
-
Size
192KB
-
MD5
a2d3f6d31ed7e0bb23eefcf8a5fbb01a
-
SHA1
a80e1e79b7887a29fe20c4e4b93e80e89659991b
-
SHA256
387660c7618a154b94e836c93a913ed40f89d017d8c330e03d47ae2ab2a7d04f
-
SHA512
88b420fa52e2875ed21b0ecbc8b329c8855248a972f83a3a062d092b3ea2fee780c13b6f4ac0f250c8222a377ad733b5bfe53296363bea4f112dfedd2869ea43
-
SSDEEP
3072:4O64zyFlJDGx0HqSYxNXUfMim4G3p8e8hE:Mf1s0HZ8em4G3p
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24481220x0000000000260000.dmp
Files
-
24481220x0000000000260000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ