Behavioral task
behavioral1
Sample
b9d716ea4bf17f8aa249b2447e01d5521f1998c93277d780366aff1907ba243c.exe
Resource
win7-20220812-en
General
-
Target
b9d716ea4bf17f8aa249b2447e01d5521f1998c93277d780366aff1907ba243c
-
Size
175KB
-
MD5
308e2dfd3ce57a41495912afa0f44d85
-
SHA1
78807a98d912f200b5738c972a93d6b7cab90f5f
-
SHA256
b9d716ea4bf17f8aa249b2447e01d5521f1998c93277d780366aff1907ba243c
-
SHA512
1ad26391d31818d684268b0a9c9bcd39c81b9c254c53e2cde3d8d0dc1d81879443678c75f82d1a2edca452364b47c9ee5a20df42a5e288f456e8b0b10b1cd05f
-
SSDEEP
3072:o9xqZWPTa9ApGvghnc20wDieNj9vhDbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUwj:oHqZvghn3HDhvh
Malware Config
Extracted
redline
rambo
31.41.244.4:4062
-
auth_value
27a4582b18c644bff25aa100604a7538
Signatures
-
Redline family
Files
-
b9d716ea4bf17f8aa249b2447e01d5521f1998c93277d780366aff1907ba243c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ