Behavioral task
behavioral1
Sample
33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe
-
Size
174KB
-
MD5
c2655f3d4ce5ee7e0a85e9babdf85ab6
-
SHA1
4ebd87a4bd12b9cde4e35e4794ef1759522905a9
-
SHA256
33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39
-
SHA512
5fc5cfd9c36161981c7a996d05ffe19aaac897b1872c518f5f551ccddd57f942184350b146c04a0353358a27173fd1b0747923d531a6cce4da60e40cf2d22690
-
SSDEEP
3072:Lfn6mOAI0ueunROwoGYqLE0I8MnBjJk8e8hfyl:LfIAI0ueunBLE0+Bji
Malware Config
Extracted
redline
sq1
185.225.74.51:44767
-
auth_value
698af4e4684b19e1acea9a7ebb86fc9b
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe
Files
-
33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ