General
-
Target
4963d919bac31ae036be7ac3b7ec18aa04863034740d9200a224803bd6fac356
-
Size
340KB
-
MD5
8b9c18e43d83510dc9bce75201ce1aa5
-
SHA1
baa9b95c0eebb7d82e2c3957ddd030360a6b3f0b
-
SHA256
4963d919bac31ae036be7ac3b7ec18aa04863034740d9200a224803bd6fac356
-
SHA512
509e3d94d0e763a97e4fc465ab42ef2b6467d81616a6ce340472201c5f563569ec3b02beea05e9b4edf38298206e808be80043b26c833380ba6a9527c52d3737
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
4963d919bac31ae036be7ac3b7ec18aa04863034740d9200a224803bd6fac356.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ