General
-
Target
2cc6c254eed136a89ce586ac4c5a6bc7e646fee832c08ff0a9769c4f6084299e
-
Size
338KB
-
MD5
0a824761d00bef4cb486b3c6343c3a51
-
SHA1
53a50f3e4b76b07b05e451a671236740ec02b863
-
SHA256
2cc6c254eed136a89ce586ac4c5a6bc7e646fee832c08ff0a9769c4f6084299e
-
SHA512
f6f85039d8d740921fb3d1e37d9068ffc5e830c7cc2f8e2e35226106d96e0d3b441c72f3dd379f04f18cc405c068262f6e69c6b3b01f04afb64f3bd77f6ec9dc
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
2cc6c254eed136a89ce586ac4c5a6bc7e646fee832c08ff0a9769c4f6084299e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ