redline | 7b22c93ed0d15254f3517f2207c6fc64[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b22c93ed0d15254f3517f2207c6fc64.bin
Size

560KB
MD5

7b22c93ed0d15254f3517f2207c6fc64
SHA1

9c5eaed7f004fd383d925034fe9f76a15198f162
SHA256

06897e1eb4e9370d4d37bafd7b216b098c5082fb8605a4e87cab386f12c2ac98
SHA512

eb519f226648fb24d1ef72359c8b86fd97538006ddaf673050a79e92b3f9b0da59592d703c02265de993a0c0976bf79eab9468bcaf8622c15d9fa86128f9f39a
SSDEEP

12288:cTWz9wDwcb9A7wlJVmxaD2q7pfeyLTly/CDYNUQdz6eFA:cTU8Re7yLiqdW4Tly/CDaA

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b22c93ed0d15254f3517f2207c6fc64.bin

Files

7b22c93ed0d15254f3517f2207c6fc64.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.+z:
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m&6
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ