Behavioral task
behavioral1
Sample
050b300970eda436c30f6f04f5da5cb6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
050b300970eda436c30f6f04f5da5cb6.exe
Resource
win10v2004-20230915-en
General
-
Target
050b300970eda436c30f6f04f5da5cb6.bin
-
Size
192KB
-
MD5
050b300970eda436c30f6f04f5da5cb6
-
SHA1
e11fb5b610dcf5657a2ed1fcd75077aa5a8b50e6
-
SHA256
fadeeca948bc82165cc1bd43c5d4a4cd463b402c993a2296cf7f1eda23691be7
-
SHA512
ebbc65b9cd6f11dec9ba30c5f5c1300acfb5e6d6ddfbce71e663a42e3c1281f3adb6e11da57d55f7512fe6fd12bb316bdb71de8eee69d81d339402a75f476cb9
-
SSDEEP
3072:OR4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5J:ORdvI0YSN0g7E0B2SsQ5
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050b300970eda436c30f6f04f5da5cb6.bin
Files
-
050b300970eda436c30f6f04f5da5cb6.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ