Behavioral task
behavioral1
Sample
si462430.exe
Resource
win7-20230220-en
General
-
Target
si462430.exe
-
Size
175KB
-
MD5
4acf8dce8ebdf45ec62e2a7e31548fd8
-
SHA1
c493ff69a54d6cf31bfe81f3a979de8c6cfa5c2e
-
SHA256
1aee215cde71e0eac5df06f1090496fd5f838837cce87b6b97cdd8103df39f95
-
SHA512
a4806390e4d0185de1fb3f5ea8620a00d2ba4644de3d986f1dc6660378fbbedbf1c68a81000f2e94432477ccd59ab69b481952d6f49117829b7696f668d1ddee
-
SSDEEP
3072:rxqZWJBaKULo3CVTwsYeZzFAh2/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuJ:9qZICVT3LAh
Malware Config
Extracted
redline
baby
193.233.20.32:4125
-
auth_value
ac57b7f238265a76162de47751c48bb7
Signatures
-
Redline family
Files
-
si462430.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ