Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
General
-
Target
file.exe
-
Size
175KB
-
MD5
bf611e81e1b1823dd280169a3b92a8a5
-
SHA1
fe9220f6cbfcc59de43a9cdf0bb59256e7693b17
-
SHA256
43b7343b5742434d77d8885692c06f686472bfdb2b8113c03cdc8341d7d96019
-
SHA512
8831984b189abb7af3b63dac773582c58f5f7a1e6900b5e2550c87becb4235478fe97a3dea44526f6d8e7954e77a8a03b03a7a3c910055f1de74d2e36651d80b
-
SSDEEP
3072:e+30JsUDva6bvyoTGPx1/PhIHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+/:L30u3oa/hI
Malware Config
Extracted
redline
-
auth_value
33ead37e2427193565ca5ade22d0f41f
Signatures
-
Redline family
Files
-
file.exe.exe windows x86
9de8f240d21b5c561ef5c5706a4fe398
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_�orExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ