redline | LauncherPC_debloated[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LauncherPC_debloated.exe
Size

1.2MB
MD5

4619f014958049156d3668c3cf71b0d8
SHA1

4cedb9da4343278cfbfe16a2f13153f30ba82193
SHA256

e4aa13a28d8809b5fbc58400d02f0c3dee7f99b884b935c68059254c992948a1
SHA512

359ec8c004af14cbc5cf60b7e1af8afbc2081473fb972fd018c7c072553c25468c15468e97c68990040cec771f9596ece5ee04d06c806f63cf93296147e3d4b7
SSDEEP

12288:zGa9O989894z79PhkQBVSWAuKWzbCj9O9a989Q9EnC:ztYOO4zRPi0VSWBKWz2pYUOiE

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LauncherPC_debloated.exe

Files

LauncherPC_debloated.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ