Behavioral task
behavioral1
Sample
29801220x0000000000270000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
29801220x0000000000270000.exe
Resource
win10v2004-20230703-en
General
-
Target
29801220x0000000000270000.dmp
-
Size
192KB
-
MD5
bff7217d2185eaf5708aa7227cd46801
-
SHA1
d47b356af33d5c69c73dc1f4bc4cac4f7c7e9bd0
-
SHA256
94dc89e9a4797c009e49c258c5db5bc5c4a0a48e2e80652dcae57462a91e2f3d
-
SHA512
111e8abf9a80d26f1b1dff5c066837adfaae9560aa47c2cd3a7757601f55ab6606b784b491da8e64f878d104d36843dc5f28c8913b99d0d0ed94fd3f8a328772
-
SSDEEP
1536:MlBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRk8U:MrqCnNsZWSZ5GxN8yi8yIHVF+78e8hO
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29801220x0000000000270000.dmp
Files
-
29801220x0000000000270000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ