Behavioral task
behavioral1
Sample
0x0007000000015653-44.exe
Resource
win7-20240704-en
General
-
Target
0x0007000000015653-44.dat
-
Size
95KB
-
MD5
16280875fdcf55ab4c8f1dff6dabc72e
-
SHA1
39880e6fbb258f4f4fa5c79337ec893acae55fb7
-
SHA256
91455ac8837ff1fdba7067cd3e7f790c1649ae70164ccbdf0483eae831a7253a
-
SHA512
53ba4e5e88a8f19ba3faa2f1244501c2d62827a9178ec0fdc995582e03e7d8e39f2dfd7bde11285781a65a021d4f4aab48b94be66a8a1cebbd47ab0cb819202e
-
SSDEEP
1536:RqseFqJklbG6jejoigIg43Ywzi0Zb78ivombfexv0ujXyyed2ltmulgS6pE:/eScYg+zi0ZbYe1g0ujyzd1E
Malware Config
Extracted
redline
Vic
beshomandotestbesnd.run.place:1111
Signatures
Files
-
0x0007000000015653-44.dat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ