Behavioral task
behavioral1
Sample
i9134456.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
i9134456.exe
Resource
win10v2004-20230915-en
General
-
Target
i9134456.exe
-
Size
174KB
-
MD5
8358ead05d0cc0ac7d990fef4c6da5a5
-
SHA1
72197a1ee9936567607d446a009b068e902e22d1
-
SHA256
4faa93c7f1f93cfb3d2a66fa9aa20dac50dccd76ddfaea6141eb1d4be81f9c39
-
SHA512
77cffe459c8347dd48a7616423017555aa22c2ef61f212eb3dc8397e27835e6a27a5c04c8d641775cfd52a483a4c40713049fb5da0492168beec6a8850882ea0
-
SSDEEP
3072:OXfiOpLvUI0pl0KtOlZ9LRQl/2E0+lccMveJ18e8hq:0iIUI0pl0Ky42E0SMveT
Malware Config
Extracted
redline
ramon
77.91.124.82:19071
-
auth_value
3197576965d9513f115338c233015b40
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource i9134456.exe
Files
-
i9134456.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ