Behavioral task
behavioral1
Sample
21601220x0000000000370000.exe
Resource
win7-20230703-en
General
-
Target
21601220x0000000000370000.dmp
-
Size
192KB
-
MD5
de593197d29c8bf75db8842b916b7865
-
SHA1
69e8245a9d989a704bba027bd7998310eb252ce8
-
SHA256
b1caa884d306dd94048ea91a37470c18b1180baae4d0f090d162bf66b8bda97a
-
SHA512
addcf4b5e7496b4da2b83cefa226dc9de9c7ad20bca46ec11574c1aa0396573df41d4a9e1398c544f62ca4a04630dfd75fa7282d3337a50c288af70459fcd9e3
-
SSDEEP
3072:8O64zyFlJDGx0HqSYxNXUfMim4G3G8e8hE:Yf1s0HZ8em4G3G
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21601220x0000000000370000.dmp
Files
-
21601220x0000000000370000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ