Behavioral task
behavioral1
Sample
636-10275-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
636-10275-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
636-10275-0x0000000000400000-0x000000000045A000-memory.dmp
-
Size
360KB
-
MD5
015b7950cbaeb030f276f5ff23bbdbcb
-
SHA1
4141c65a8cda0f53f549977e68a2b087057693c7
-
SHA256
b8d58c50a77372853883eb237d7876717efef06a8da31541bb4f3126f8b1474f
-
SHA512
6a1a35299e79a4360128a108ba4955a549e5d6514e30e20bc4430d681a6d8a5790d3ff4e66368939fafa78b7b747024390167daff18fdaddcf94efc920f815cd
-
SSDEEP
6144:Kgdm3Z/IC7NBv0crrCuEJKVJwT3zAtVBhyq7rozdncyVW9amHVmo31HkgyOPb0Aa:T4v7DMcr+JKVKqvozdncyVW9amHVmo3u
Malware Config
Extracted
redline
CHEAT-MENU
amrican-sport-live-stream.cc:4581
-
auth_value
e948baa7e2fc2d71d02a5864e088ed36
Signatures
-
Redline family
Files
-
636-10275-0x0000000000400000-0x000000000045A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ