Behavioral task
behavioral1
Sample
3000430x00000000001C00000x00000000001F0000memory_JC.exe
Resource
win7-20230831-en
General
-
Target
3000430x00000000001C00000x00000000001F0000memory_JC.dmp
-
Size
192KB
-
MD5
e9aca32f546f117599a012fe66d4d612
-
SHA1
c758db300c54d40bb1f84f10c217cbc80dd45444
-
SHA256
3443d7948b1b266132690541128ca767532a9952a412f3de28bc769c7e14c114
-
SHA512
67fa3fa9deb3c56db593eb958ae880b87c3bad478c1bb310d8ad0e2d4659f73a040b6e7b138a0962206da56d9068fc1d0eeb702063bdd16c736c4a612d649bf3
-
SSDEEP
3072:jR4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5J08e8hj:jRdvI0YSN0g7E0B2SsQ5q
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3000430x00000000001C00000x00000000001F0000memory_JC.dmp
Files
-
3000430x00000000001C00000x00000000001F0000memory_JC.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ