Behavioral task
behavioral1
Sample
delivery.exe
Resource
win7-20230220-en
General
-
Target
delivery.exe
-
Size
168KB
-
MD5
381edc28bb9683f575cdf6e10648647a
-
SHA1
63de4d13195a74131301679b47614422608d14ea
-
SHA256
72f689974f397e95426f561c8ded3348e839c9dad066b1b1fb2f813d85be97a6
-
SHA512
b5bddb3b5477d279da369803cd9c657c5a5d6ac427db93469d981797779183169a01827a5a46349d84e4412de7ff3e3c303f5d9bd14701703d0c11db64e50e45
-
SSDEEP
3072:RobLcI7FI+ZHU8qVyo6aYFDHiFg8e8h0:Rov/7SuvtFDHiFg
Malware Config
Extracted
redline
delivery
45.9.74.117:45245
-
auth_value
7bca09417c59ffabbe35b833dac5a9b7
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource delivery.exe
Files
-
delivery.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ