redline | winPEASx64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winPEASx64.exe
Size

1.9MB
MD5

24dd289e8ade9f180b8954fe62527aaa
SHA1

c0b284a7ee86bd62c8b5d3454849173f89cffccf
SHA256

75eb2c9abf42e3f8feec140a0ebab280e28bb7e70ade0781b8f3b9043226eb89
SHA512

5a3dd9509ea1cb6b597504efb6ec929317af638b61dd58f96c99952e88718a17684012e0b4f0a788d5c58642af78bab3c1894bbd93c4c2863c5de6d757baf6e1
SSDEEP

24576:OAyk8BitHiOk+deaNS6CzBUPCIH6iPi9/imbiBfttm9gYKd:OAbdea1OUP7lq96muPtm9g

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

winPEASx64.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ