Behavioral task
behavioral1
Sample
64e8cf322bf9b1d6144ddda277fe8680.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64e8cf322bf9b1d6144ddda277fe8680.exe
Resource
win10v2004-20231215-en
General
-
Target
64e8cf322bf9b1d6144ddda277fe8680.bin
-
Size
328KB
-
MD5
64e8cf322bf9b1d6144ddda277fe8680
-
SHA1
27837b1447741cf953960bb6f1ac8df5a7050959
-
SHA256
8a4e2b1b8781628e8ac62e477853c49d928e7cec336543f2e37844c04d8fbd53
-
SHA512
54e9dab6a80526604b3b11e21c4174c77632b50a22f7ed5000b17bbcf73819035abaeb5103ed61456fd4e8bb0acc2d86f14ea7a96fa0e3f063ed7aa3ee92ae25
-
SSDEEP
3072:q2cLYbYoQnBrtL9b9ANI/EOacCK9sEdYYXknXoWx9R2AgkVMRqT6Dv/YqeqiOL2u:/Wb9+cCWYYKx9AAXVMRqT6D44L
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e8cf322bf9b1d6144ddda277fe8680.bin
Files
-
64e8cf322bf9b1d6144ddda277fe8680.bin.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ