Behavioral task
behavioral1
Sample
b878d3fcc5c9a8cd83c70cbac450e386b158f4605fba200a27cd5d69f53ff362.exe
Resource
win7-20220812-en
General
-
Target
b878d3fcc5c9a8cd83c70cbac450e386b158f4605fba200a27cd5d69f53ff362
-
Size
175KB
-
MD5
0de671da7603b0941b85af87039042b1
-
SHA1
47f68b51f35f2b15204930ed330bf0b5cd5cfbf0
-
SHA256
b878d3fcc5c9a8cd83c70cbac450e386b158f4605fba200a27cd5d69f53ff362
-
SHA512
40718b370cce4c4174ebe9e65290ff4b1871e13b4ec226a064659425d7aa8f7e4afafa9e8fa3958988ec22c01abe489400892d3ee8d05b615074f9f800c1c583
-
SSDEEP
3072:wxqZWXragQx+/IJpM68IZeou9oh7jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jN:eqZWIJpDHkoh
Malware Config
Extracted
redline
funa
193.233.20.11:4131
-
auth_value
baa1ec0e508179242510f62eca462759
Signatures
-
Redline family
Files
-
b878d3fcc5c9a8cd83c70cbac450e386b158f4605fba200a27cd5d69f53ff362.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ