Behavioral task
behavioral1
Sample
1660-140-0x0000000000230000-0x000000000044D000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1660-140-0x0000000000230000-0x000000000044D000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
1660-140-0x0000000000230000-0x000000000044D000-memory.dmp
-
Size
2.1MB
-
MD5
99f6d15de3c2e57a5affc113c69fef87
-
SHA1
786c3a010cbe734507c63b3208a7f1be6b698074
-
SHA256
4724f2473c5bd73de01ff4dff7db5e272c82f81496cf015722f32eef1e014413
-
SHA512
1a44b8ab6a267dce21db5f93a05910570d0ca9f215dbaed887b139d17a15f63aee6dc2863f9bb8e00ac57e75cf182b9e014e9f20b4a6db4db63bb70aa1c29443
-
SSDEEP
12288:6uXI2ubZ3VUx1UZRQTrM+bOjkNfBLT2/dqB0yFMXLhaAbjmmufkQmRwC8gYWIcZy:rY13VUrUZRQTr9bph0y+b0AWq/QbaY
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1660-140-0x0000000000230000-0x000000000044D000-memory.dmp
Files
-
1660-140-0x0000000000230000-0x000000000044D000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 655KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Miss Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.money Size: 296KB - Virtual size: 295KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.money Size: 296KB - Virtual size: 295KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.money Size: 296KB - Virtual size: 295KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE