Behavioral task
behavioral1
Sample
2668580x00000000004000000x0000000000430000memory_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2668580x00000000004000000x0000000000430000memory_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2668580x00000000004000000x0000000000430000memory_JC.dmp
-
Size
192KB
-
MD5
f62beb0585d7725931e268cd49dd1a3a
-
SHA1
95528990d3c592a9516b5f1f60c148d4e665bacd
-
SHA256
947b69399000ed2a747442b6673a485ef6f514331689474e7068fda29be57645
-
SHA512
c9f779ff8b9eba340f95ab572e43ab486f817751578dc49c81b558a24f2fbf492c885f70d9d9875dc42f924f6ea2d2cf67a7316f45d27399404b9343e05dd961
-
SSDEEP
3072:DzW2njxkszI0gZW2+OeJaNKdibXiMiA5E0+C/QbYLwwJ:D3nlzI0gZW2Y0XlB5E02bYLww
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2668580x00000000004000000x0000000000430000memory_JC.dmp
Files
-
2668580x00000000004000000x0000000000430000memory_JC.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ