Behavioral task
behavioral1
Sample
2364970x00000000002500000.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
2364970x00000000002500000.exe
Resource
win10v2004-20230703-en
General
-
Target
2364970x00000000002500000.dmp
-
Size
192KB
-
MD5
ef1e2a2d24196511d9de5ae9df9b4313
-
SHA1
0dc42229ac038e0b30a9be2efa28d92230956eeb
-
SHA256
c4c93cc8e22b50ec1a1cb770065b034010e45ba67599b5e9934e0a97f19cfac5
-
SHA512
3937c61ace718337fa57432f9263aa373de8bee655728a440908369b25eb45ff34fb4390860c3d72286d2b1cda513a512a95732f1eb824a027b74167e1c46150
-
SSDEEP
1536:UDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0GkL:88sO/O2DnEba0LxNEyPNcmpTuZ8e8hT
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2364970x00000000002500000.dmp
Files
-
2364970x00000000002500000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ