Behavioral task
behavioral1
Sample
f7538f926aae1461606c48376ded5f21.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f7538f926aae1461606c48376ded5f21.exe
Resource
win10v2004-20230915-en
General
-
Target
f7538f926aae1461606c48376ded5f21.bin
-
Size
192KB
-
MD5
f7538f926aae1461606c48376ded5f21
-
SHA1
5870736c0a0aa9ce489d0dcf458d8380d62826ac
-
SHA256
f6c64cbacf5ef1c9b6f836ba4c07abb0ae4afda8b06bc6f306aa436a0505d157
-
SHA512
2f12cbdb74f00de2874f74b4dc56734d006d98a14e061aff34db9bd444bc6ed4d220a5c9c40bb02a434f1ceee74e08dcea3fcc0c6483ac2c9ec0bcd709f461c8
-
SSDEEP
3072:V1rfs5//I0bmCKugObCKR4eSwbD1J19cgrE0ML2Oam82JC8e8hU:Trk/I0bmzulrE0U2E82o
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7538f926aae1461606c48376ded5f21.bin
Files
-
f7538f926aae1461606c48376ded5f21.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ