Behavioral task
behavioral1
Sample
malware_smoke_3420946147.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3420946147.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_3420946147
-
Size
88KB
-
MD5
54fd6bd316719f47d0d6413d717bc7db
-
SHA1
fe1c566771dd4d220539cd39e72b249d0e4fe56c
-
SHA256
a2a84733a35c5c7e861850d5e87ebfe2f188d3d7d0fa16c29d954cab75959997
-
SHA512
5de35a283398dd4088af4be05262604d88d9af8c74791f8934738443767df93d7dd722979009489cdc256fa6cb18f8864bab8562a8f745821400db508883a9c7
-
SSDEEP
1536:iCLKaiGtUphoVwUaMgZ4Nozib2FzFF+XaITXc/mP3:TLhiGtUph4aMSz2uoX1T8k
Malware Config
Extracted
redline
superstas
62.182.156.185:48571
-
auth_value
604ee35503790c1baed5f1edd5172e88
Signatures
-
Redline family
Files
-
malware_smoke_3420946147.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ