General
-
Target
0945fa5c68abd6a90ad59ff25d269b72b4cb769d5268337cb7189cbb2cad4100
-
Size
338KB
-
MD5
1e3e7966ea789db06cff5a6b4578c80e
-
SHA1
166488dc66b65ec3a29bb58b97b25a28f5688431
-
SHA256
0945fa5c68abd6a90ad59ff25d269b72b4cb769d5268337cb7189cbb2cad4100
-
SHA512
2ed175047a3843440c3130e8aa93b7271916a57241ce6fc54e9133083c43c3f40eba1a5a331b128932931f3c7054c0e4978f20aceaaf79f5d8a70c658743c6d1
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
0945fa5c68abd6a90ad59ff25d269b72b4cb769d5268337cb7189cbb2cad4100.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ