Behavioral task
behavioral1
Sample
2448830x00000000002E00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2448830x00000000002E00000.exe
Resource
win10v2004-20230703-en
General
-
Target
2448830x00000000002E00000.dmp
-
Size
192KB
-
MD5
9ba0adcb647a938661dc55665ef9c13b
-
SHA1
b789f28335a3d55dd0ef34016fa572c8a57abd9d
-
SHA256
545b372b95c667617d407b6b4f5c5c6c63c764a829ae5f3dd5a92610fc16cbc6
-
SHA512
1635c7186e7e3ed3becbf81123603d14040cf85ce4718f84049a83e64747c298162abd318ca7629716ed688ce7b9f61fbaf5f6f6a2da4346a41c98043547d5fa
-
SSDEEP
1536:TDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0GkC:H8sO/O2DnEba0LxNEyPNcmpTuw8e8hT
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2448830x00000000002E00000.dmp
Files
-
2448830x00000000002E00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ