Behavioral task
behavioral1
Sample
128d2d2a6a859ba8f5d85b83bea6e97c360092672e84a1265a0efa3882456fb1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
128d2d2a6a859ba8f5d85b83bea6e97c360092672e84a1265a0efa3882456fb1.exe
Resource
win10v2004-20220812-en
General
-
Target
a346afb6ac91d3c334389ee2a77375a9.bin
-
Size
50KB
-
MD5
29aaf757c197e6544b264b16a5c8d7dc
-
SHA1
e48faa670441cd273202d4d1e71f0861e076182c
-
SHA256
df8b2739b764ad569403a181e9016faa634ca09d38416064b882a6bad6b37f92
-
SHA512
c84319614dd1357d45e7abaed5881dcade06df0d24df6f7dcdda479139c7ab2b8ac7477d88bbbe3497d0551cd7932af13ba82eb81be4cd3dbdb021f815cd46f7
-
SSDEEP
768:qmRhmIgc96Q6NSf8tYlgcpvTEwYta0CP0ZN9TK0YCm4inebazOSVyZp8OHT:L3mIqQUPGlgkvTYDCPsPT44inwDVZeOz
Malware Config
Signatures
-
Redline family
Files
-
a346afb6ac91d3c334389ee2a77375a9.bin.zip
Password: infected
-
128d2d2a6a859ba8f5d85b83bea6e97c360092672e84a1265a0efa3882456fb1.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ