Behavioral task
behavioral1
Sample
16a6161a7efab534489a56476cf707a3ceffde375993f7991e23865ad7a6f706.exe
Resource
win7-20230220-en
General
-
Target
0fd6abe16eb10c511c44e453b357092c.bin
-
Size
62KB
-
MD5
af236c8cb4d96edb50b7dc7f25ec41d3
-
SHA1
28231a51ee83ca8eb3bdcc06453d1ff1606dda00
-
SHA256
453b7641b01b18b17bd80ca9c2f77db55269c2524377c18e974a7f7fc2eefc52
-
SHA512
a87fbd8e1ea2de50d5d3625bc9bf5b0652b4431645bb70b7cdf173ba394a1c8e8a874b3349511093f91f2cc8aab397aa41050b91c83f06ded47fae877e0a55ad
-
SSDEEP
1536:EDS4OUY6AX4R2sXy4kZYsQka4G2Xx2yPOXLOGuXUB:0S4o6AX4AsnkZ+J4Gg2VLOsB
Malware Config
Extracted
redline
D2P new
45.32.29.148:34824
-
auth_value
fa80dd4dc7193557e96cfffdcc2cfbd1
Signatures
-
Redline family
Files
-
0fd6abe16eb10c511c44e453b357092c.bin.zip
Password: infected
-
16a6161a7efab534489a56476cf707a3ceffde375993f7991e23865ad7a6f706.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ