redline | Milanaka_patched[.]scr | Triage

Sharing

General

Target

Milanaka_patched.scr
Size

2.0MB
MD5

d2f4700fca8e22ae135962774f3b6d03
SHA1

9dab228318d05968d2fe91475067b27b9c24ada5
SHA256

a72adbf4aefb73bde32b6e71408d1519dd0554612fcc7ea2a5b4c07dad645c60
SHA512

2730b1f62c4f4e6fdd51d80493465c3feec51cf8e114bc6d3befba35f7644573aede0e6e863506fa6a7f88cbc36ba0e5681a6e4f6512981540e4724333960bd0
SSDEEP

24576:V5HJx7gFZDToRIpZaQUSZDNNIum2YyhZX9uWlZX9uWfm2YyzVUYOOir8Y:ZCn/o8KSZR6uzZXlZXf5I8

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Milanaka_patched.scr

Files

Milanaka_patched.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ