Behavioral task
behavioral1
Sample
0x000300000000b46e-76.exe
Resource
win7-20230220-en
General
-
Target
0x000300000000b46e-76.dat
-
Size
175KB
-
MD5
7382598795e61668556c9ba865acf062
-
SHA1
99c60e85e0df408bf4e97f0d144b9f6b1d890a1b
-
SHA256
663866740811ad99b5a34d8c0a31bc6e49b662d7476e46fbe6001a83c464d622
-
SHA512
093f2b0d7dbd5772e89aa85852b378c2f18403fd7efc243a06b182a62d13716bd9d09b19b5a2024baadd0df9567a5e1d968c34174207998a7865a594505fd432
-
SSDEEP
3072:uxqZWWFa7E6T8D5dIvjeN5FKh+fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuC:UqZPtugKh
Malware Config
Extracted
redline
5555
167.235.141.81:36255
-
auth_value
842c595ff01a0b4b161f122d875170f5
Signatures
-
Redline family
Files
-
0x000300000000b46e-76.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ