Behavioral task
behavioral1
Sample
a22b5011e7e19aa0ae7d943d68b7dd218a5ad0645c8d698c5c8faaf599e4a2c1.exe
Resource
win7-20230220-en
General
-
Target
a22b5011e7e19aa0ae7d943d68b7dd218a5ad0645c8d698c5c8faaf599e4a2c1.zip
-
Size
51KB
-
MD5
d3e2a9be0e7572e9b3109a83b80af298
-
SHA1
a2db4a332ef66c3d3e826acdb48fb4050354a24c
-
SHA256
2820bacc2708214560f5a387d22cc5637a7c9cea052eccc44f61a75dda04c52e
-
SHA512
7a4cde4e7123646fe4c3108c4b4c11bd58e50c037fd75e211fa16a46ddffdec374a5d56f28d788c31c5aae377f68fb620d22ae6e341028912558fdf220b43fc8
-
SSDEEP
768:ctG/l++VpIvJGxNH+Uh4/GJWmgUNx7he1s8CN6xorL20A6pf1EdtWTdjDNo:cM/o+yUU/ez7sNxCyLkeAxDNo
Malware Config
Extracted
redline
dent
193.233.20.33:4125
-
auth_value
e795368557f02e28e8aef6bcb279a3b0
Signatures
-
Redline family
Files
-
a22b5011e7e19aa0ae7d943d68b7dd218a5ad0645c8d698c5c8faaf599e4a2c1.zip.zip
Password: infected
-
a22b5011e7e19aa0ae7d943d68b7dd218a5ad0645c8d698c5c8faaf599e4a2c1.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ