redline | 6f8b8aa2535ca1eeaa1e84c8c630315c[.]bin | Triage

Sharing

General

Target

6f8b8aa2535ca1eeaa1e84c8c630315c.bin
Size

560KB
MD5

6f8b8aa2535ca1eeaa1e84c8c630315c
SHA1

00b7ae2d031d1dd34517b3845489145627aa9cd8
SHA256

dfe33614550d2d259572d45d2967f1e997e2d2683c8995be0ab3adc1f0102277
SHA512

bf7e81e398b6cf41444ef39899742e4c784e9e986d29a1cc0740a994a7a48a8eab8bed11bf5a10c1863eed216e0eb47cf4df39d549138ccc0387fd698da1c475
SSDEEP

12288:HakZ4voaccAcDZn7k9tpCdvMtVVFteVEuAe4eaQYt/8hB:HRZLadd7k9t0dvKYEuA0hB

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8b8aa2535ca1eeaa1e84c8c630315c.bin

Files

6f8b8aa2535ca1eeaa1e84c8c630315c.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Oig
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E``
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ