Behavioral task
behavioral1
Sample
e0c02452db84cc7833e582ff687023a8.exe
Resource
win7-20230831-en
General
-
Target
e0c02452db84cc7833e582ff687023a8.bin
-
Size
192KB
-
MD5
e0c02452db84cc7833e582ff687023a8
-
SHA1
fad428d030a73e20a23ff659be48e853423c7cbf
-
SHA256
490c3cef9430dea22663c16ed89a4c172dc762c87bbe6dece11a4f40e6e038b0
-
SHA512
12a0c046bddf1aef021620a2efb23b9e50aa3f87566c28fd4f2b0ec7a1e76a5dfd14d39eacc504d447a5012b0874b8076f4ac33b3e1866cdc1a033ac50b85346
-
SSDEEP
3072:8wFwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jn8e8h3:8UzAmmI0k7vVe0E0YIM1N
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c02452db84cc7833e582ff687023a8.bin
Files
-
e0c02452db84cc7833e582ff687023a8.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ