Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file
-
Size
200KB
-
MD5
7e850dc493acd192852a7e4606af6511
-
SHA1
b4c37144f5cd6af3b03799ac0d849269cdf73882
-
SHA256
bb2c85780a8d88d7f9897d72dbd7a0547c43c8b4b237f1072c58caf73ea2ade5
-
SHA512
55db4578ae2ff44e70ffc85166c30e248e4db1d6de8d3bc4dfe982bf6a7c06b0545c0e4d409789eba5c67dd31e231ed64c6de0ed89230cb851c9f98842a4d24b
-
SSDEEP
1536:LYtxKYnY0Nr6nqVikCgOl7FYNDgeKubXEeQgy4/pzur9tkadOUw1y/pbYY3Ge:8vYTpkIlpp60/VCGkkrhpPGe
Malware Config
Extracted
redline
999
185.173.36.94:31511
-
auth_value
eeb32d70335ccad7d0268a8abc5f6881
Signatures
-
Redline family
Files
-
file.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ