Behavioral task
behavioral1
Sample
3dbd0fff1164843ed2b5d151a89d40d1.exe
Resource
win7-20230703-en
General
-
Target
3dbd0fff1164843ed2b5d151a89d40d1.exe
-
Size
127KB
-
MD5
3dbd0fff1164843ed2b5d151a89d40d1
-
SHA1
84eab2ed0b7432f391f07c91c8f6dc0fe274c42e
-
SHA256
65b00004c90c3d177d400cc52e13c20b489903db211fb91b8216e5fb23d86859
-
SHA512
1bae20180c486028aa477a26a5a67817b8a82e36c395b8b24e9220916269c88998ed3d139e1604e93e72f93400aa8ac08d27b6f14d4fdd6c9c1285a22bdfbef0
-
SSDEEP
1536:PaEcnVHT1e/ofspSm+fqpSmU8xTTDAtFRYhIj9dbV7f//uOysYgibfbFDKsRf:SEcZZU6ipSf+UEetl3DYgafJlf
Malware Config
Extracted
redline
detect
212.22.94.142:16212
-
auth_value
4dc4b156e536656ba6feec03bebf786c
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dbd0fff1164843ed2b5d151a89d40d1.exe
Files
-
3dbd0fff1164843ed2b5d151a89d40d1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ