Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win11-20240704-en
General
-
Target
Launcher.exe
-
Size
2.1MB
-
MD5
027bb5827e250671ebaee0200df3eaf4
-
SHA1
73329c59bc6cc585ec1c18e216da1c65b5518c62
-
SHA256
80f306d656669534f8996c5b83c6b0c1aa87e0097bac53b79d8ec30550ea5e44
-
SHA512
49f5ce1731b941854566037a5bf1495b1151e5b770a482677d86ac3ab1dc8dd0f3269f90a054d8d828560767d4098850f819a144f14fd62314326d2b15a9b6d9
-
SSDEEP
3072:bcZqf7D34kp/0+mAokyOppAQUg2ZB1fA0PuTVAtkxzl3Rp:bcZqf7DIcnHrz6B1fA0GTV8kL
Malware Config
Extracted
redline
zenless-github
89.23.101.114:1912
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Launcher.exe
Files
-
Launcher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ