Behavioral task
behavioral1
Sample
8bd235b4cf309de43726ebb430b77c6e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8bd235b4cf309de43726ebb430b77c6e.exe
Resource
win10v2004-20231130-en
General
-
Target
8bd235b4cf309de43726ebb430b77c6e.bin
-
Size
240KB
-
MD5
8bd235b4cf309de43726ebb430b77c6e
-
SHA1
543ee980b484ee834679f8b7a38e12760c21d81c
-
SHA256
fe7f5d21b274860c6dfef2519bc8c11d22e1c8167b43c33f5a80473800a7d2a6
-
SHA512
a3fdc98200b722a03bbab3fd28531882878987d9f88e89141c1a2761663bd6e150e88ac7353c7d28d5dcd00083c1d6222d422d9c17cc7a4fac5965d399057434
-
SSDEEP
6144:xC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:tO5NgcoTrp9LrorsI
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bd235b4cf309de43726ebb430b77c6e.bin
Files
-
8bd235b4cf309de43726ebb430b77c6e.bin.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ