Behavioral task
behavioral1
Sample
4960370x00000000005900000x00000000005C0000memorydmp_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4960370x00000000005900000x00000000005C0000memorydmp_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
4960370x00000000005900000x00000000005C0000memorydmp_JC.exe
-
Size
192KB
-
MD5
149d848d7c8a8da09a42a761c50855c8
-
SHA1
556dad06f0aa15b552c373233b26e7b2b4880403
-
SHA256
8b9060a601918b74676b5ecb7cae54892989135577628ace8e7bbd4bdccd6fa4
-
SHA512
d5a3191b3060b0e0ede98867a8a2b4ac0308b60c8ec54156a4d3a8f36b4c21f0fd893e334e58037626070b16e986404d8f603401c0de4a1da380434099b023e3
-
SSDEEP
3072:j7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JH8e8hh:fKht18I0aLSDIOIylE0QXOiT4d
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4960370x00000000005900000x00000000005C0000memorydmp_JC.exe
Files
-
4960370x00000000005900000x00000000005C0000memorydmp_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ