General
-
Target
5b52417b623b8bcc7c7e8ae60d4dbb84067d4396d142b20c2dd19fdac82558b8
-
Size
135KB
-
MD5
1b0c9aab3573a0e0f1c427ea7e68377a
-
SHA1
ca1fc7d9da6b75a34320408e004cbdb530196b96
-
SHA256
5b52417b623b8bcc7c7e8ae60d4dbb84067d4396d142b20c2dd19fdac82558b8
-
SHA512
6fa2d3d5eeea4dc5e5b938264f7590f7d35366a7667a84bc99e6b905e8a0ae91e72954901f393cf88e78a60da056ce5bf45f393e9a66331adad17cc29d7fc103
-
SSDEEP
1536:dqFQoDJoI7qlVZRGWZ30rzb2Vcm7Pd31i4TGqVObuU1GOTd6La4Kof83wYkOIz:4FQ+JLwoqVDdFipqVaWOZ6G4Kof8Iz
Malware Config
Extracted
redline
0006
45.88.66.86:44966
-
auth_value
23c9d25d254c674c348f1653e1af8886
Signatures
-
Redline family
Files
-
5b52417b623b8bcc7c7e8ae60d4dbb84067d4396d142b20c2dd19fdac82558b8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ