Behavioral task
behavioral1
Sample
winPEASx64.exe
Resource
win7-20231020-en
General
-
Target
winPEASx64.exe
-
Size
2.3MB
-
MD5
4b63208d99641fbb72aa57e54886423c
-
SHA1
6db92837b1c60716bb2a84f91405c20b637b9c2d
-
SHA256
54717ae2ead16c76d36799347143b3de322ee07c0836b504b383bbf6eaebeaca
-
SHA512
bb0bc01e9fe5dc18543ccadab8391e1672fabfd790f994b472d98c10eef8d262147cb6ac76ad7a62b39fed76ac36d777ac2903bb3ab8f535d85fd3d43590e02c
-
SSDEEP
24576:aJjmTSVj3ZwZ/3AhysPoxBMF7Cpx6hBdNKkThXHf5geLPA:UmT0Wt34ysPxM0j4kBHf5g4
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winPEASx64.exe
Files
-
winPEASx64.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ