Behavioral task
behavioral1
Sample
0x000600000002313b-1139.exe
Resource
win7-20230220-en
General
-
Target
0x000600000002313b-1139.dat
-
Size
175KB
-
MD5
0fa34cd3a2518cda73fa6d663e243940
-
SHA1
214e990a8f5c5c414f535c62eea9e4b6d9b1c9fc
-
SHA256
7326cf17df05493ff88979c06b23e7729fde2cd4d55a093eb428c0a580d260e6
-
SHA512
67bd14fdbde4385836752dab89e457527ae24b4d9c552a5c8a8175e1853eb398bb4db6ec0001d4d70d05e0b7b2b82a69853486be802b1106b80e2cd73b108991
-
SSDEEP
3072:DxqZWFFa7E6T8T5nkW0whesC9ih4fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jz:VqZcT5n/Hgih
Malware Config
Extracted
redline
lino
176.113.115.145:4125
-
auth_value
ac19251c9237676a0dd7d46d3f536e96
Signatures
-
Redline family
Files
-
0x000600000002313b-1139.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ