Behavioral task
behavioral1
Sample
651acd24fd7ca46d6c41676e58f655c7.exe
Resource
win7-20220812-en
General
-
Target
651acd24fd7ca46d6c41676e58f655c7.exe
-
Size
336KB
-
MD5
651acd24fd7ca46d6c41676e58f655c7
-
SHA1
9243f77c28747277fd858a558c54d546af843d01
-
SHA256
6b1a6e9d2fd406bd64d19f83d5d2da53daf81cb77deafd44093e328632c812e6
-
SHA512
41083455fd1eeb538f429b3c21d8da655a7a658c7ea4985c62759d56dec217ce9b78900ed5390daf91d4b07cbae509416b0a8ab309d5c9adb035229668b0e966
-
SSDEEP
6144:b+k9H1u+zyq5gjxYyTn2vmqT46Pgrj5n1a2jLwhJ:afeE646Pgrj5n1a2jLwhJ
Malware Config
Extracted
redline
newads
185.94.166.20:80
-
auth_value
338df40e51b8a087f60d43c54e3c5efa
Signatures
-
Redline family
Files
-
651acd24fd7ca46d6c41676e58f655c7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ