Behavioral task
behavioral1
Sample
3f665abde637a3c65e46e96daeb9aa15c8dda5e2ed2fee15048d4fa790e66991.exe
Resource
win10v2004-20221111-en
General
-
Target
3f665abde637a3c65e46e96daeb9aa15c8dda5e2ed2fee15048d4fa790e66991
-
Size
175KB
-
MD5
8b08fce2936c8363994dda1d6e9ddadf
-
SHA1
15cfdfe6e406c0e69d2e6261b898b97eed6f34e2
-
SHA256
3f665abde637a3c65e46e96daeb9aa15c8dda5e2ed2fee15048d4fa790e66991
-
SHA512
925ad9dbe1681a3494450978217c0dd98b637e681a9713280756908f444bef95cf9b9649aa80383561ec59b5951885901b16227e9853c1111a4271ab8e1d0b67
-
SSDEEP
3072:RxqZWPTa9ApGv8fdUTeuWFXhITxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwH:DqZv8fG2Xh
Malware Config
Extracted
redline
Wish
31.41.244.14:4694
-
auth_value
836b5b05c28f01127949ef1e84b93e92
Signatures
-
Redline family
Files
-
3f665abde637a3c65e46e96daeb9aa15c8dda5e2ed2fee15048d4fa790e66991.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ