redline | winPEASx64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winPEASx64.exe
Size

1.8MB
MD5

cd3d4200a382fd900ae3710624205e62
SHA1

896944142da448418c7ab46661594d9e68f86867
SHA256

8128e145dbab3794e0c8ae5cc56ee43c6ac150ab61391ccf3fcc732690904a79
SHA512

f5e267ec28cdb26417286a90fbdd709dfba7fdfdbb65cc32ff08602f6409c6f2234926bb7771901082151e7e1fe00e0f1eaac942d92f372c59cc9c1e1eb59362
SSDEEP

24576:34Qneu3RfdGluoIMAC0QasLIP8B0p2XgCRu:34KrGluRNC0QasL0Dp2Xg

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

winPEASx64.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ