Behavioral task
behavioral1
Sample
2ce9c5959e690188643a74fd530a56fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ce9c5959e690188643a74fd530a56fc.exe
Resource
win10v2004-20220812-en
General
-
Target
2ce9c5959e690188643a74fd530a56fc.exe
-
Size
90KB
-
MD5
2ce9c5959e690188643a74fd530a56fc
-
SHA1
93912a5c53fef17369312d4a986e1b1b0a5a4568
-
SHA256
9b306e53715e3e11824c91b1e8d63fba2caedf64278d2ffb37da79f7ea560b3d
-
SHA512
f2aa663c57cf4a1d2b727d33458fabcc65bd0a028119b7ea0b037fa42cb7ed2f1c39d2ac6bfc0d98d8b06ed2d9bf7b33618fb3a274d36b56b5fd7731eb7d1f5b
-
SSDEEP
1536:DtJwfY8WKTh6qNOVqSF91gkiYVd8guR8IwHbr+aLGSVChGlz:5Ja6qNtSjDCSshe
Malware Config
Extracted
redline
J
77.75.230.104:13401
-
auth_value
a642ddb77eca79047847204b61c027a6
Signatures
-
Redline family
Files
-
2ce9c5959e690188643a74fd530a56fc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ