Behavioral task
behavioral1
Sample
uWZ67ET52.exe
Resource
win7-20230220-en
General
-
Target
uWZ67ET52.exe
-
Size
176KB
-
MD5
6ffe34cfe1ae31a9834b565b5c129c35
-
SHA1
f4b632f5d9e9d3a5b66ea05e01509c09a119f220
-
SHA256
c6fa14ab6d416039d8c2885c90fa015de0c0752f0529b83b6e38f0b40adf47ff
-
SHA512
dbf11754671c95454c1cb6c2d3c01e2633f5d8a16da737ce97bf8f8a9771a493b84b8d9dedd3592db0355b554b0b438bdc52044e3e06fc2905e0cfa59ed02f3f
-
SSDEEP
3072:OxqZWXragQx+/Z5reN5FchA/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+cU:0qZWZ5gch
Malware Config
Extracted
redline
forma
193.233.20.24:4123
-
auth_value
50b8e065d7cb1e9e30786f7a370368f9
Signatures
-
Redline family
Files
-
uWZ67ET52.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ