Behavioral task
behavioral1
Sample
c3daf38b34317a6bc3f577626aa61d8d61cf97f9969b555da677bc2f7d5de13a.exe
Resource
win10-20220812-en
General
-
Target
c3daf38b34317a6bc3f577626aa61d8d61cf97f9969b555da677bc2f7d5de13a
-
Size
175KB
-
MD5
f8cb16b848623cc1c8c45edf4cc7f4ea
-
SHA1
0654178ddafa6355816d39a604f35ee27aeaec04
-
SHA256
c3daf38b34317a6bc3f577626aa61d8d61cf97f9969b555da677bc2f7d5de13a
-
SHA512
6b29ad1cc31abfc0c8ff17cd63a01f4ba7ad1c5067a39fcb312466e638f80d07a09e211aec91f5d5fd6c4dd2382e664b54ddb3fd012844a698e362b007c8f30a
-
SSDEEP
3072:CxqZWFlaSEW8vfyEWGlSReK6FJh0XxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0ja:wqZlfyEWY5Jh
Malware Config
Extracted
redline
Pro100Traf%599
82.115.223.15:15486
-
auth_value
f3cc083bba4d90ff570b774dc3ba0f58
Signatures
-
Redline family
Files
-
c3daf38b34317a6bc3f577626aa61d8d61cf97f9969b555da677bc2f7d5de13a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ