Behavioral task
behavioral1
Sample
21921220x0000000000290000.exe
Resource
win7-20230703-en
General
-
Target
21921220x0000000000290000.dmp
-
Size
192KB
-
MD5
ba7f27d601ad4f3aa3a4a695150401ad
-
SHA1
3be8fa188681c0d25c2abcdd7d35a68d5d3ddc4c
-
SHA256
6d0f4fef504da1b111075edba33c284ef104af027d4d2aafb8c4b5437060c3d1
-
SHA512
c517a77e059e3cc374de94834d65cb71a902c493849fb885955e51455a04f5f0c992238681dafe87ebb34c0d408175160ab97aa5fb0915141efafc86b66b80e5
-
SSDEEP
3072:4O64zyFlJDGx0HqSYxNXUfMim4G388e8hE:Mf1s0HZ8em4G38
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21921220x0000000000290000.dmp
Files
-
21921220x0000000000290000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ