General
-
Target
c7a7f0476315a800e2ecad094126c4394d0f595a42d494fdaff4c2e64775f2bb
-
Size
110KB
-
MD5
690b7ae4b560ad7b0a2813baac3f56f1
-
SHA1
f6604e13bef092d643c2be314375cde09c56b8be
-
SHA256
c7a7f0476315a800e2ecad094126c4394d0f595a42d494fdaff4c2e64775f2bb
-
SHA512
91dae6c377d8b0841d49a0bcf46134e579600b61f59dc4eb13623e958d6612a0cfbb063654f870da4c50b2ba941ce4886cc4d62054c42320ea197c91027c22d4
-
SSDEEP
3072:JBNjRnUL3znPTC/zf7XHorFe4YVxwzX/ffEXUgcR3+c0Mg:U3znwhIffEXtVM
Malware Config
Extracted
redline
1
38.17.53.140:30686
-
auth_value
7d4c8895c781964b1dd3b37efbb922d8
Signatures
-
Redline family
Files
-
c7a7f0476315a800e2ecad094126c4394d0f595a42d494fdaff4c2e64775f2bb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ