Behavioral task
behavioral1
Sample
7a51a34ca5ccfe6eb43ef6abc0f92d46.exe
Resource
win7-20231020-en
General
-
Target
7a51a34ca5ccfe6eb43ef6abc0f92d46
-
Size
95KB
-
MD5
7a51a34ca5ccfe6eb43ef6abc0f92d46
-
SHA1
115643f90fb03144d2486f3a5f1b67d9cd8b42f1
-
SHA256
5675b6a982a8224078a4c5338480f37f536a29ade205f85a39d2cbe6cc28815d
-
SHA512
e4756b82c6d8e82885842439d87675d8227ac0375d4b363f411caef06e7f3179d4a406d58ee5167826f9f3b5b3efd31f727ec6e2efa62eb0b1a5d13e134d8f88
-
SSDEEP
1536:5qskbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2HtmulgS6p8l:X2wiYj+zi0ZbYe1g0ujyzd38
Malware Config
Extracted
redline
11/21/23
91.92.241.80:1337
Signatures
Files
-
7a51a34ca5ccfe6eb43ef6abc0f92d46.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ