Behavioral task
behavioral1
Sample
executable.7592.exe
Resource
win7-20231023-en
General
-
Target
executable.7592.exe
-
Size
1.8MB
-
MD5
9e21aee9e78e61a8f6236888cf3c79cd
-
SHA1
56c4fbc5ead17fe49c3e5df4560c3f567a2dea84
-
SHA256
167ac28029196ca52ca573db7b6f7b7909dc5c2fe9c992889d29929def7f6df4
-
SHA512
7990f379ee2d3767a15ff22fa81cda301bb2b2823f4300b11d41de10cc0a3bf791ea7c847c46bcf513b4f2eb30eb663160f7497fdfbc2050e1e3090f5c572be3
-
SSDEEP
12288:uT4+3RjJe8/8mLXhsjrpvlOywv1PkvnJwlJlCFr6a3ape1BLkKgxF8N0kA7TK783:C4+ettOz1Pk/+lJlCF1IP8N0l9n3
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource executable.7592.exe
Files
-
executable.7592.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ