Behavioral task
behavioral1
Sample
28961280x0000000004B00000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
28961280x0000000004B00000.exe
Resource
win10v2004-20230703-en
General
-
Target
28961280x0000000004B00000.dmp
-
Size
256KB
-
MD5
56b823fcea8f0dde4de3dcc1e1615108
-
SHA1
226591c782f5aa68a235a01ab9a110237875f5fc
-
SHA256
95bac1223e589e16aa7e4ec038d26ff2fa5a457e006053c173a4e4b0c3d393b5
-
SHA512
eeb4be0719e0176a71e9297ea892689565ca062defd24f3686b09ed75bc4b754edccc9ca4c5e6701888b596da59c77f3c06d74fbcd382b6bb884d399a3c34335
-
SSDEEP
3072:FrqCnNsZrqCnNsZWSZ5GxN8yi8yIHVF+B8e8hO:FdIdti5ZkvVF+B
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28961280x0000000004B00000.dmp
Files
-
28961280x0000000004B00000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ