Behavioral task
behavioral1
Sample
0x000900000001230f-55.exe
Resource
win7-20230220-en
General
-
Target
0x000900000001230f-55.dat
-
Size
95KB
-
MD5
ff9794ea7f869383e4b236a2428063ab
-
SHA1
32e872f7a8ac57f6891cc468ef5a52afe56fe150
-
SHA256
96454cc2da89b6418878adf53066ff3c5a57304f4e608a5543d1dd1cffb91950
-
SHA512
f190e187ddec860ef3ec2520e27c872d0bca2ce2ffc2fa94196861efbdb44d51e7abdae818cb12874c829e13fef08971a6bb9e3e532062f516f482393356ece3
-
SSDEEP
1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2ntmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzdvY
Malware Config
Extracted
redline
kmzzz
146.19.215.3:35361
Signatures
Files
-
0x000900000001230f-55.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ