General
-
Target
cb7f4fdbb255e33a2f4513001967c3eaa33933f95e510e060f8b73d0d0addc8e
-
Size
337KB
-
MD5
e7944c1330d83a5aa1f478d70d46cd9f
-
SHA1
8d5b5ea2684a4a91729b4908c90f2f790f1fec59
-
SHA256
cb7f4fdbb255e33a2f4513001967c3eaa33933f95e510e060f8b73d0d0addc8e
-
SHA512
a449961a73b0d278ef56107eae3591c2b5e2802f28eefbf09769a5798ec8325a0dc22c6d07bd6a30e6c89808a8c7a2ff5914529e77a0e246c24b44af73db842f
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
cb7f4fdbb255e33a2f4513001967c3eaa33933f95e510e060f8b73d0d0addc8e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ