Behavioral task
behavioral1
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win10v2004-20220812-en
General
-
Target
2846a8343dad66545eaeff4139747dd7.exe
-
Size
89KB
-
MD5
2846a8343dad66545eaeff4139747dd7
-
SHA1
0d3c371a46065235c92fbf42280bca9339541cca
-
SHA256
d3d2ddfa17b273b9f85d14a56e9a7c4ad887e6722feba70fc4fc02ba89afa233
-
SHA512
47a6f77d7ace47eace2c9c6d8843135a61546de0b3849241c64f8d43226d1c62cb0bff8afde37927b72110944cd4b4424fd8449f58b17e84e1a4565a10c853e7
-
SSDEEP
1536:dgLJw1AzWKhhb3Me5oaDYKf9qLVE0StZIbgw2Dbr+4BP2ZDNwEYdcu2BGFZ:6LJrb3M1mYKFGaZIb+vvP2ZDNwEYdF2k
Malware Config
Extracted
redline
45.8.23.11:5004
-
auth_value
99b70df8cf3e1b75b71df8ec8115dc6e
Signatures
-
Redline family
Files
-
2846a8343dad66545eaeff4139747dd7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ