Behavioral task
behavioral1
Sample
cecb354d8f50d4717886779012c2a1235b7c6823.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
cecb354d8f50d4717886779012c2a1235b7c6823.exe
Resource
win10v2004-20241007-en
General
-
Target
cecb354d8f50d4717886779012c2a1235b7c6823
-
Size
128KB
-
MD5
c8df1e8210f62ffa8fca6b99270f8aa8
-
SHA1
cecb354d8f50d4717886779012c2a1235b7c6823
-
SHA256
418b471b7251f285cf2c69df42fad6edc73cfcbdb8932b683b994480fe1c53f1
-
SHA512
18bfdb780fd4dd1ef8344b41a5332d047ace93d5375340aac62b9aebb597c95ed4fc8cbeda111127b73bd1aa352ea16945bb4aa8a7d79147e6bd8933b8e39fd3
-
SSDEEP
1536:ARxqkCr3Q2IRA/cGB5USktl8xEOe5NBfcHLN2e9buZg4Z7SJ0wuei6oL0:gCr3Q49edOiNBfcHMqEhSJhWA
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cecb354d8f50d4717886779012c2a1235b7c6823
Files
-
cecb354d8f50d4717886779012c2a1235b7c6823.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ