Behavioral task
behavioral1
Sample
1152-55-0x0000000000230000-0x0000000000260000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1152-55-0x0000000000230000-0x0000000000260000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
1152-55-0x0000000000230000-0x0000000000260000-memory.dmp
-
Size
192KB
-
MD5
083938f4646d7b853bd46f7d42b841ff
-
SHA1
170199374cc9979485e910489fac6d79a6910ddf
-
SHA256
f1d5092a582b34d27eb96378df01db5f76273b219ea4a926ff36b9c88312fcad
-
SHA512
9bf43b50251be9bde75365853369a13a9cdc21b9600a4bcfee0abd469db9199769447b655f582bf3333343963531c9a375bd529811e83271ced3a68f605e91a1
-
SSDEEP
3072:+PvG3NKuI0pd5adoO0UhFjkMJEstE0yMJXMK237xWeUJl8e8hp:+PzuI0pdUdJkMNtE02K237xWeUv
Malware Config
Extracted
redline
smokiez_mix
194.169.175.232:45450
-
auth_value
487069a534eda35cad16294d172be8c7
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1152-55-0x0000000000230000-0x0000000000260000-memory.dmp
Files
-
1152-55-0x0000000000230000-0x0000000000260000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ