General
-
Target
7b8360419ecf2c90e5dc6386e626158d83d9f08963cb10fdc273f48f31a16ded
-
Size
175KB
-
MD5
429b4723b5ac3ac64d9e6520dd670534
-
SHA1
10a185bffc447e0a8bcba484faef6b2929768bbb
-
SHA256
7b8360419ecf2c90e5dc6386e626158d83d9f08963cb10fdc273f48f31a16ded
-
SHA512
f645e8ad6727a32eb3c33c49e55f1b22dd3b79372c5e39f7a26b2ba4dcb13117041fb383cf60cd62dea2f442f7cd7bd9139729fc06da53e96e89728c47f7c1c0
-
SSDEEP
3072:WxqZWjHaJIppUV/VPeX5FWhgrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+T:8qZ3V/gWh
Malware Config
Extracted
redline
it167676
82.115.223.15:15486
-
auth_value
c433715c79334d392c5c72b6b6b5536b
Signatures
-
Redline family
Files
-
7b8360419ecf2c90e5dc6386e626158d83d9f08963cb10fdc273f48f31a16ded.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ