General
-
Target
2749f6c3783d901717bff3368a1e85068a932ee5566d8f92083bf5094f399662
-
Size
175KB
-
MD5
f90211c91e6caf309f57b8fc5e6128ef
-
SHA1
641e515bde658c9f706e0d691ce50a0cf43a0800
-
SHA256
2749f6c3783d901717bff3368a1e85068a932ee5566d8f92083bf5094f399662
-
SHA512
379977a7b84e3860c006d7afb97451b8cebe40faa4cff9c896d21202e587e3be1e5fe259260419142486cef842bdcb3db437aede38e99ac5313ad78a304652bb
-
SSDEEP
3072:vxqZWjfa8oty3+x7IeJ5eXZ9qhfrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:ZqZC+x7ZJAqh
Malware Config
Extracted
redline
lamer
62.204.41.170:4132
-
auth_value
e462e0abaf1b88173cf4ee1882d21c06
Signatures
-
Redline family
Files
-
2749f6c3783d901717bff3368a1e85068a932ee5566d8f92083bf5094f399662.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ