Static task
static1
Behavioral task
behavioral1
Sample
redone.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
redone.exe
Resource
win10v2004-20240426-en
General
-
Target
redone.exe
-
Size
116.7MB
-
MD5
0e7fdfc867bcc0414c9e8e308235b47b
-
SHA1
b2497e31129a428974a3c14bb9099ca28cc05de5
-
SHA256
af5a03b66a3bf2a6cf6b88ef6fcc917a5dc13e384eef93b97b0acecd0b6dc6fc
-
SHA512
3b1e40e106475ec7f67376b4938751c74eb19a2ae1378ad145fac12e80f64e960bb41207ef0bd4629e5ecf5ca7352e206b0af3dc13f8a4ee1785c2c2f257d6cb
-
SSDEEP
3145728:oMngLV2wQD8iLvJjsYbcBK8wlX50lJQwl1PiemzJBA:YLYwQgiLv+YWK8w8auRvmU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource redone.exe
Files
-
redone.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
@ Size: - Virtual size:
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
� Size: - Virtual size: 392B
IMAGE_SCN_MEM_READ
����\�} Size: 215.3MB - Virtual size: 2098.7MB
�u���@ Size: 2599.3MB - Virtual size: 20.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA