Behavioral task
behavioral1
Sample
0cca99711baf600eb030bbfcf279faf74c564084e733d.exe
Resource
win7-20220812-en
General
-
Target
0cca99711baf600eb030bbfcf279faf74c564084e733d.exe
-
Size
175KB
-
MD5
30132c45c2305b287d96a3ad8158e9e3
-
SHA1
c89477868792dbfc6abeb3016e4fcc542b01bea1
-
SHA256
0cca99711baf600eb030bbfcf279faf74c564084e733df3d9e98bea3e4e2f45f
-
SHA512
1f6ccbaf0787c9bc61f568c4398374426961fc73ed7ea38c75e27d7025a9df6f93ea111297a6a02acdeea52845067e222e681f278dc7278d834fbbb6be98b74e
-
SSDEEP
3072:+xqZWjHaJIppUsqT9U6eE5iKh6rxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOu/:kqZ3sqTGZKh
Malware Config
Extracted
redline
nocrypt
176.113.115.17:4132
-
auth_value
4fc7cda1ab5883a6197f20f517ce2a8c
Signatures
-
Redline family
Files
-
0cca99711baf600eb030bbfcf279faf74c564084e733d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ