Behavioral task
behavioral1
Sample
fa89080413c8fb298c1b25fb796061d8.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
fa89080413c8fb298c1b25fb796061d8.exe
Resource
win10v2004-20231020-en
General
-
Target
fa89080413c8fb298c1b25fb796061d8.bin
-
Size
248KB
-
MD5
fa89080413c8fb298c1b25fb796061d8
-
SHA1
fff0a56031b7db98d8ca6385378ad7fd22c28425
-
SHA256
713267a35c9f360c2751aba80d6f593173137849c9f8ea6514e0a605702f1433
-
SHA512
d46c9d688f26908e39dd1f0c6ffe60c9fde321a11fa418b3de62f84b8aa43576fb1fab31fd43d1df365fab5d0f11cb3e05b5d412a62745cf17d4b869457fa107
-
SSDEEP
6144:0mSQQNgcPf2iHv0+9JR/xadbzBNFygk5:THQNgcPf1JROBNFygk5
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa89080413c8fb298c1b25fb796061d8.bin
Files
-
fa89080413c8fb298c1b25fb796061d8.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ