redline | 3290c58cc992f1ed5f45576e9d092b71[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3290c58cc992f1ed5f45576e9d092b71.bin
Size

404KB
MD5

3290c58cc992f1ed5f45576e9d092b71
SHA1

aab16a6a7161d3dd2ab389c567d405e8855f127d
SHA256

e2f873a2c34b83a7b91556b5888d4631a7e8bb67988cc2855f817c21e85aa52b
SHA512

a0b4e42ef46e7e6ab90ea81c124ea181700571e922ad8b8f373c099f53327418ddb1062efa3f959fc6a5f670760010ccbedef2594ac33fee7be08f6915ffcf60
SSDEEP

6144:UAcaGEZt20ZSwbz8+DxlE8kVAOnFOK4jI0SdbndrUjE0bfoTzmoGbh8Ey:UAFzZtT7UT1ITjI0cWpfoTzmoGbh8Ey

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3290c58cc992f1ed5f45576e9d092b71.bin

Files

3290c58cc992f1ed5f45576e9d092b71.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ