Behavioral task
behavioral1
Sample
8c3ba1573b4ac6e73101b65bc0969ba3.exe
Resource
win7-20230220-en
General
-
Target
8c3ba1573b4ac6e73101b65bc0969ba3.exe
-
Size
168KB
-
MD5
8c3ba1573b4ac6e73101b65bc0969ba3
-
SHA1
044233d16cec70a0280f6e1ae34d2f98cdfd0aa3
-
SHA256
2fbe48083a3d5f93ac15460e3614ecf6044de24668bc02ee9cdbb3e449c4ccf2
-
SHA512
c379d06f65ebb75732b5d5d760c2fc6222943b00aaa20d57fba9ff4fa9b9e9b6822e42b84c95d6219b5f8c0b866b493a52dd3211248330985a5a069f5adf5e2b
-
SSDEEP
1536:vNbN1yqlVZRGW1/nrh8jLQJ2CxmTGqV8bur0KTtA8mKv83wYkR8e8hr:vNbLtFfjqV0xKTy8mKvr8e8hr
Malware Config
Extracted
redline
TEST
77.232.38.234:34067
-
auth_value
9e8ce8e5df6a00c70cd3505154b532cb
Signatures
-
Redline family
Files
-
8c3ba1573b4ac6e73101b65bc0969ba3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ