General
-
Target
efa87cfd8414c6d5335091b650855b44ba39053e7d827004a62ce03138c8ad57
-
Size
338KB
-
MD5
042640d0596fb81d571fe16822801864
-
SHA1
2f3d443487f81748458ab9cdf6c3cf513d9cb479
-
SHA256
efa87cfd8414c6d5335091b650855b44ba39053e7d827004a62ce03138c8ad57
-
SHA512
7444245ae50d4726394cfd09c9adeb8e8a2119e05a90b5bf69d47809790d37ec4fd95b6a5cd2bb3b9f25840f0894fb30e2da548d1ab001687f329599ebd7c0a1
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
efa87cfd8414c6d5335091b650855b44ba39053e7d827004a62ce03138c8ad57.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ