Behavioral task
behavioral1
Sample
5dc36fb5b7e93a0be0f04c7c63ea169e.exe
Resource
win7-20230220-en
General
-
Target
5dc36fb5b7e93a0be0f04c7c63ea169e.exe
-
Size
355KB
-
MD5
5dc36fb5b7e93a0be0f04c7c63ea169e
-
SHA1
6b8d3961aa92198fe158a84c3c30c772add88018
-
SHA256
6c30b849a72e0a88e8ca3e4fa46c2cb0b1ed0fce2f7cb7125b945d4aa03162ce
-
SHA512
d30f03a76e20919a954d95cae242c722e69451164ca289c7d687df72cbcdfd118ddc85a36c31d0c2688c0b810653c38110094b7f6d2267b55545110b67973d27
-
SSDEEP
1536:3vZi55zWaaDfjvo9m3oCpDaFF2U9nXvb8NrfJbu3zAgYMe0wuei+snYcclOtL6:3xqZWDPaEosarNn/b87es5MehywJ
Malware Config
Extracted
redline
122
15.235.130.155:24291
-
auth_value
6200cc82d7ba271cba1139a3a1a7b4a7
Signatures
-
Redline family
Files
-
5dc36fb5b7e93a0be0f04c7c63ea169e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ