Behavioral task
behavioral1
Sample
b15c97e01be8722183f789dc2bb51ca9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b15c97e01be8722183f789dc2bb51ca9.exe
Resource
win10v2004-20230221-en
General
-
Target
b15c97e01be8722183f789dc2bb51ca9.exe
-
Size
168KB
-
MD5
b15c97e01be8722183f789dc2bb51ca9
-
SHA1
8afbfd5de8f716b2d6e8ee39aec7530b852b7a88
-
SHA256
6f9dc3831e0fb42dba60a53d410f79d7976e10b38d32f0a641b0ae57bba52636
-
SHA512
b81f0c53d300fad82fac7eafbbc136f80cf56f7652334cb9b673bd336287cc7ca87543dd4463c06324d23a04b83bad07f5e5348512ed12fa21564af3a864cb57
-
SSDEEP
3072:cFqcmyyMLQ39eLqVCmaWZTYoIZP08e8hz:cFSyyQ8QLYZTYoIZP0
Malware Config
Extracted
redline
MillionsDollars10000000
88.99.184.104:2449
-
auth_value
af3383761df5f19029e7a92c1acf53e4
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b15c97e01be8722183f789dc2bb51ca9.exe
Files
-
b15c97e01be8722183f789dc2bb51ca9.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ