red[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

red.exe
Size

301KB
MD5

0c1dfffbb5278244a486352a07051b70
SHA1

4f1ed837b4eb7df4711060052695ddb7ce82e60f
SHA256

a84ae588f646a174a40d5e3313c77ae11cbf30af39e34dad915742253b7913ec
SHA512

ed970c59632ed8cb8fdca81b3158ad4b3b5dcfb8b7955b7b151fcdb769cdb2b0357c32b7d83b40f5d1c26904f576fb4fc01b056c985a5a55b05fc5d9e2f78c78
SSDEEP

3072:HEI6kUVfPJGP9Bn1UFbFKta4NXHtFmBMDEYQPOYfTbTXn8YpvjcOMvBMK43XrR5/:yZq9J1UbFKlVE5bTC

Score

1^/10

Malware Config

Signatures

Files

red.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ