Behavioral task
behavioral1
Sample
216f6051b2e02681016a7273f015ae11.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
216f6051b2e02681016a7273f015ae11.exe
Resource
win10v2004-20231020-en
General
-
Target
216f6051b2e02681016a7273f015ae11.bin
-
Size
248KB
-
MD5
216f6051b2e02681016a7273f015ae11
-
SHA1
bdbb9ff22eb4285b23356bdcaf0b13a1a78b8cfb
-
SHA256
df4d2892438fbf498fc84256af1191ab25467831809ef678d778bb6a52bdc093
-
SHA512
bf9884bcd630015dbe45ddbeaba72113743f10b04258848657f92a1821e67415426dd4e1a2c678c9bdefe6d80428765c31de99be784e121cf09edeb4de874528
-
SSDEEP
3072:Nbng4InXNgcy9Wy3aPGcntCTt/qhGFlvDYLXZiTtzH:Vg/XNgcWr3aPu/5FlvDYLpqt
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 216f6051b2e02681016a7273f015ae11.bin
Files
-
216f6051b2e02681016a7273f015ae11.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ