D:\a\PEASS-ng\PEASS-ng\winPEAS\winPEASexe\winPEAS\obj\x64\Release\winPEAS.pdb
Behavioral task
behavioral1
Sample
1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcdeN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcdeN.exe
Resource
win10v2004-20240802-en
General
-
Target
1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcdeN
-
Size
1.9MB
-
MD5
6b33eb343b8fac1061e8bd1d5711b0b0
-
SHA1
7d014c6381acf74848c11632830a674ec337ef25
-
SHA256
1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcde
-
SHA512
d7b193bc6b3a7456771d08245b23474aa3abe43f585ffeda2b0508286042cb4ec9403729662c2552534318fc47db11afbb7a0118e20e278a2e20bf5877de613c
-
SSDEEP
24576:4Ayk8BitHiOk+deaNS6CzBUPCIH6iPi9/imbiBfttm9goKy:4Abdea1OUP7lq96muPtm9g
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcdeN
Files
-
1c0e8a45d43f3c74ac046b189b57bc4fad48fe7d45250e852294ac88b71edcdeN.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ