Behavioral task
behavioral1
Sample
0x00060000000143a2-1061.exe
Resource
win7-20230220-en
General
-
Target
0x00060000000143a2-1061.dat
-
Size
175KB
-
MD5
2285df998184037ed0430ba96021663d
-
SHA1
fea02fcf1d2945aa34aa647a437ee25297148cff
-
SHA256
40356f5fe6bbd84ba516a0e2c452067e1b1955a5dabeb7b4be5b8d192b7b940a
-
SHA512
bdf949ac32759b278c79407de88f1679d49e3b9ee2394da8441e27cd622269ea708d299f8ca5771dc03f28d21d51a249462f9d8fa5e3f86814a8a16aa48cde9a
-
SSDEEP
3072:kxqZWZRanU2n0YLxE3I4Ge/N9PhhPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jr:6qZgYLx+r5Ph
Malware Config
Extracted
redline
luza
176.113.115.145:4125
-
auth_value
1261701914d508e02e8b4f25d38bc7f9
Signatures
-
Redline family
Files
-
0x00060000000143a2-1061.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ