Behavioral task
behavioral1
Sample
cd87ff5ad5f63d84ecd86cfc4bdcdd58aa476875ef05610dde2b8398d0a32968.exe
Resource
win7-20221111-en
General
-
Target
cd87ff5ad5f63d84ecd86cfc4bdcdd58aa476875ef05610dde2b8398d0a32968
-
Size
175KB
-
MD5
a2e71094ce0281819cf8c62f085c7412
-
SHA1
f1744e03ce15382bfe4afd693e7d9111cad7cad1
-
SHA256
cd87ff5ad5f63d84ecd86cfc4bdcdd58aa476875ef05610dde2b8398d0a32968
-
SHA512
4f8ce4f9715835d2b3dafe8cfc61f0860561e08f4e081040eb3b52bfa6abc3966fc98df469a66e7ec6250131b1df6eed61c3cd5e6976b13b67021d8f7125da92
-
SSDEEP
3072:PxqZW11a2kX8fsKande159OhIrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwV:5qZksKwqOh
Malware Config
Extracted
redline
trud
31.41.244.198:4083
-
auth_value
a5942e18edc400a8c1782120906798ef
Signatures
-
Redline family
Files
-
cd87ff5ad5f63d84ecd86cfc4bdcdd58aa476875ef05610dde2b8398d0a32968.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ