General
-
Target
1a5e6385bc184453bf4a2bb9124a69b306dbeeb6613169e8ecc277085fc2f7e8
-
Size
168KB
-
MD5
bb3a5e7ab613be03204e3f0c0b56528a
-
SHA1
c5a0f5ba9c9e1bbe7fa117eed606dd72876f0078
-
SHA256
1a5e6385bc184453bf4a2bb9124a69b306dbeeb6613169e8ecc277085fc2f7e8
-
SHA512
c283b680cc58d95365ba3f523aec52a966c81e2628aad1d70aed3210f359d3c74627cadec0364c156f690e3927d119a4faa938777c61e313b7a662355fdbbb6c
-
SSDEEP
1536:LLe2ep5pbqlVZRGWg82H0rBcrufUToRVVzrqi/slsfTGqVubuG3HL4Kcv/83wYkZ:W2ebphJHsTV4OyqV6jr4Kcv/78e8h8
Malware Config
Extracted
redline
Yankee
46.105.147.141:9986
-
auth_value
4d9da24ab4d285572b8928faf30a9571
Signatures
-
Redline family
Files
-
1a5e6385bc184453bf4a2bb9124a69b306dbeeb6613169e8ecc277085fc2f7e8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ