General
-
Target
18035759bd2d0eee17b41421c748131c7f8e6526b5d7532398d8f869674e334d
-
Size
338KB
-
MD5
afaf1290c3eec4b65144af4678028fea
-
SHA1
6e134960ad8fc1c6c768b9ed9a7028a9581d466e
-
SHA256
18035759bd2d0eee17b41421c748131c7f8e6526b5d7532398d8f869674e334d
-
SHA512
30b7fe6760096fc3360c150d05256ab5eabfceeb76cc53538d15691bfad144a907a200e723cfbe591a8aeb29d69393d29dc6e3dc2b9e94dab8510ffbb848d7eb
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
18035759bd2d0eee17b41421c748131c7f8e6526b5d7532398d8f869674e334d.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ