Behavioral task
behavioral1
Sample
f2021905fccfb19a7bf42d92361cc9a1.exe
Resource
win7-20220812-en
General
-
Target
f2021905fccfb19a7bf42d92361cc9a1.exe
-
Size
175KB
-
MD5
f2021905fccfb19a7bf42d92361cc9a1
-
SHA1
00bdae4de3daf0d8af6735c5c480079940dda9e1
-
SHA256
a7b2814efdf0b1f62accf5214afda7866bf5a2d35056f2fd759bc0d85a291c71
-
SHA512
7f0dfc8638b0bdfc928ab43ad10c933747b68685e0c7780dc361a5df08322c90c72eef174f65eecfaf6d9f387b71afdf60222cc192141ececa4789cca5bd3737
-
SSDEEP
3072:J9xqZWBJaHEDgXQn79HuUUoeqQF7hBbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUwm:JHqZVyJRUZ7h
Malware Config
Extracted
redline
sport
31.41.244.98:4063
-
auth_value
82cce55eeb56b322651e98032c09d225
Signatures
-
Redline family
Files
-
f2021905fccfb19a7bf42d92361cc9a1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ