Behavioral task
behavioral1
Sample
1704-42-0x0000000000400000-0x0000000000454000-memory.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1704-42-0x0000000000400000-0x0000000000454000-memory.exe
Resource
win10v2004-20231020-en
General
-
Target
1704-42-0x0000000000400000-0x0000000000454000-memory.dmp
-
Size
336KB
-
MD5
e541ccf90f609ec750a512d8f474c8d9
-
SHA1
e71a2858e316c8783b2f46790e0f66f4f2234261
-
SHA256
07e19802c86f4a2f2c60d2975c9fdd35c0e8a111028818d0e03cf2e09d1d800a
-
SHA512
17814331b1131ff2f48f98e22df064fe223a3f44dbaa55efb7ea2ef2d4123abfb3702089ec1d2e4898ed1362d6b207a940bd0b7f69084a65732bd908278854e3
-
SSDEEP
3072:MkHqQflJG7Vvz0nY3Ccy1L/oHi0aJxB/9KKKKKKbKqKyDQKK/j6mxNtwHrw92H8i:bHqQflMJvz0nYK/YOxBNY992Hz
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1704-42-0x0000000000400000-0x0000000000454000-memory.dmp
Files
-
1704-42-0x0000000000400000-0x0000000000454000-memory.dmp.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE