Behavioral task
behavioral1
Sample
9c0263f1817d0877b88a84a77e491fc9927c3594.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
9c0263f1817d0877b88a84a77e491fc9927c3594.exe
Resource
win10v2004-20241007-en
General
-
Target
9c0263f1817d0877b88a84a77e491fc9927c3594
-
Size
224KB
-
MD5
fed7990d3ea848cde52757b1c242fa0d
-
SHA1
9c0263f1817d0877b88a84a77e491fc9927c3594
-
SHA256
08d0fe45cc099220ee28b8d1427da5c72af76dcd5aeddaa5cb10eaa177e9d2e8
-
SHA512
502f5f497680af4c0b8207f2bae56e97d2db8ef3a520f98ed397a10f86e60473fd04aa31f047f06ee7b292939e7db5d76d5ee6ba5b7d68b8566526655fc1bb58
-
SSDEEP
3072:1kT+wO5xYQmkKzayGhXAv/xEYF/ByCkrzpiuG:1kT+fYAyNhoCOz
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c0263f1817d0877b88a84a77e491fc9927c3594
Files
-
9c0263f1817d0877b88a84a77e491fc9927c3594.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ