Behavioral task
behavioral1
Sample
f4025df8c2f9fa0c7caabb373641b71cf5862d40ab42f3eb50b32a771ffb983c.exe
Resource
win7-20221111-en
General
-
Target
f4025df8c2f9fa0c7caabb373641b71cf5862d40ab42f3eb50b32a771ffb983c
-
Size
175KB
-
MD5
cdbbd6488231239e1b95033538dd53fd
-
SHA1
37454613cb2521784b97e14303673a0533bc7cda
-
SHA256
f4025df8c2f9fa0c7caabb373641b71cf5862d40ab42f3eb50b32a771ffb983c
-
SHA512
c1120f9c1c3a31a1498828e401e6f4c55134360dc79770d7ebf43751a189bf70820dcf995d2cbbb211e42e24ffe04f37b429fdea7a17324cd078c76fc24d5ff8
-
SSDEEP
3072:hxqZWXzaWAtdsNmgHhU4em4F4hY7xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOs:TqZgNFKp4h
Malware Config
Extracted
redline
Norale100
82.115.223.15:15486
-
auth_value
6405020c141fa851b423984543bb4702
Signatures
-
Redline family
Files
-
f4025df8c2f9fa0c7caabb373641b71cf5862d40ab42f3eb50b32a771ffb983c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ