Behavioral task
behavioral1
Sample
0x000800000001230b-117.exe
Resource
win7-20230220-en
General
-
Target
0x000800000001230b-117.dat
-
Size
175KB
-
MD5
fb6b1dfc1d31819df66b4eba004f4f1e
-
SHA1
8fb4085acc6bdac0c653130d20ccf87dc0a4bc16
-
SHA256
4a8cf958110e605398244c588878680f5f367bf064573a69fded3f4ca70c7549
-
SHA512
270f0208fac6330d413709de2f1aa348f20e434bb70b886a96e7db87f74607c9dcbee92b458ea375ca9d22a89af46b31655b84d6f26fac3d12e63f8242d41f3a
-
SSDEEP
3072:3xqZWPTa9ApGvaUanmef593haHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwJ:BqZvaUwV3h
Malware Config
Extracted
redline
misha
193.56.146.11:4173
-
auth_value
e17e441c954db214b94a603a7b0b1aea
Signatures
-
Redline family
Files
-
0x000800000001230b-117.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ