General
-
Target
6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580
-
Size
105KB
-
MD5
539d03c432f7722754954dce80d0bc71
-
SHA1
154b8be08af591644454a18fc23732cf0e791e66
-
SHA256
6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580
-
SHA512
e98fb031dab6bca84ef9458e6583835dcfa1309bb3fca191a5c756bdd8d5db256e1c2f25e7ce2f346031bd5ffa46d6b37f6584f724eadc3bd8d06f2ccd41c6cf
-
SSDEEP
3072:G+uncNgiV5nchxlvN2sGa/4kFDeDBLrcPKzrF3KOK4s+7K4sO4H4jooQ4wym5QcS:UYsAOh
Malware Config
Extracted
redline
One
135.181.11.39:33468
-
auth_value
58d469dbb7a5d16d937493ee8106990d
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580
Files
-
6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ