Behavioral task
behavioral1
Sample
a5d409cffd3f1753ed02dfd45c767174.exe
Resource
win7-20230621-en
General
-
Target
a5d409cffd3f1753ed02dfd45c767174.exe
-
Size
127KB
-
MD5
a5d409cffd3f1753ed02dfd45c767174
-
SHA1
1a19dd94239b4b8ed7ffbe9b9ef48a1ccad1bc1e
-
SHA256
2bbb5ff89d0aa18fb45e667c6dc41c8ce72dd65afa0d1370673a069373cc59f9
-
SHA512
ff9fb6aaea8250656eddb3e44e821bdf81466769d3bd9c85bee396dc86e3ea32395223347720025d82ac46018af00799f6a36e57eb18ae8c81451c0b81b7a229
-
SSDEEP
1536:jaCcnVHT1+/o8I52C+fbluaIsp8VuBGAhUjfNbV7OvOFgisYgibfbFDKsRQ:+CcZZZajluOiuRQdw2cYgafJlQ
Malware Config
Extracted
redline
seed
176.124.220.193:27202
-
auth_value
58b45e4e39c7ba8fcb8cc06e8c4b06db
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d409cffd3f1753ed02dfd45c767174.exe
Files
-
a5d409cffd3f1753ed02dfd45c767174.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ