Behavioral task
behavioral1
Sample
1144-119-0x0000000000400000-0x0000000000444000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1144-119-0x0000000000400000-0x0000000000444000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
1144-119-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
7baa355fb6d9f3ac3a60275a78f3cc35
-
SHA1
a9a10591b05df69de8ef5668b2b6dbf1c406dcc6
-
SHA256
d4f8096259ce7dc4a2fcd20b3ebb6a36a9e04bc77a20e532bcf3bc1aa77fe8e6
-
SHA512
28a510a8800d10e40b585e994838fc5e122c70f675560b4e7632437cb0f8eb554e4897732971e284fd8548ab39548ae6c9b9f7536f82c84310d1631f1d7e780c
-
SSDEEP
3072:kUHj7NtBeknM4PzjDWhEVpxOAanerqCnNsZWSZ5GxN8yi8yIHVF+q8e8hOg:kUHjRSkM4fDwcdti5ZkvVF+q6
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1144-119-0x0000000000400000-0x0000000000444000-memory.dmp
Files
-
1144-119-0x0000000000400000-0x0000000000444000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 175KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE