Behavioral task
behavioral1
Sample
lr074812.exe
Resource
win7-20230220-en
General
-
Target
lr074812.exe
-
Size
175KB
-
MD5
2476904404b3c7f26ceccbd572b4acfc
-
SHA1
faa5f8a8a3688c8ef4f40e7d555e35f8408d4561
-
SHA256
d6f452246dc8d80dfb73f4292c8eeec4033c59348b2f479d36a42e893eb0e881
-
SHA512
a3ccdc0887fd541e4fffa29a90af00baeedc30311e6dd4e0a786e5681c51a21c617dfc803e15341aca6a13bfbdd94c4d7916ab2aee164f7f15fc8ef4234a2a6b
-
SSDEEP
3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuz:CqZk516LTTh
Malware Config
Extracted
redline
dogma
193.233.20.32:4125
-
auth_value
1b692976ca991040f2e8890409c35142
Signatures
-
Redline family
Files
-
lr074812.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ