General
-
Target
ade8a43186c386a850ab564c076d80a389ee3be1e0293f1210ebf328e0e72ca1
-
Size
175KB
-
MD5
9f11bd99bfbcea926407437c9f964868
-
SHA1
211eb34b0bac5ebd4a6ceba8c4be1a1b2b8a0950
-
SHA256
ade8a43186c386a850ab564c076d80a389ee3be1e0293f1210ebf328e0e72ca1
-
SHA512
77b2770ba7c62163cd2e490cbc8efa0bd60fa9c3543399fcad4443746b9ddebfbd1c0b99ce6a6c021d6ca7a781a707ec9f6c9107342832a3e97581363125f05c
-
SSDEEP
3072:MtxqZWN9abUP0PMLb/a4imekK9Oh1zxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0E:M3qZ5MLb/xidOh
Malware Config
Extracted
redline
duma
193.233.20.11:4131
-
auth_value
0f22fcdbad589a61a6c973e449218813
Signatures
-
Redline family
Files
-
ade8a43186c386a850ab564c076d80a389ee3be1e0293f1210ebf328e0e72ca1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ