General
-
Target
7637a765a546050fd2d00580248663457ed44ac8bafcb4db60960f8f0f005141
-
Size
340KB
-
MD5
f1dfada1dfc8a39dafd7fe736dc7456f
-
SHA1
d352a5df37f25e0f0b476dada0cb3d48341a6d8e
-
SHA256
7637a765a546050fd2d00580248663457ed44ac8bafcb4db60960f8f0f005141
-
SHA512
b0828b3f773aba2c850995e0c09b29ed28928451fe5d1c1dd98fca85999d6c8d08468a63ce283a0784f9af5e721eba31c572f60aa591035872801d737727e1fc
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
7637a765a546050fd2d00580248663457ed44ac8bafcb4db60960f8f0f005141.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ