redline | 6bf9044bc71935656d252d599d361670[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bf9044bc71935656d252d599d361670.bin
Size

120KB
MD5

6bf9044bc71935656d252d599d361670
SHA1

2d76d476c758f43b825434c5b0b6d08ee616d5c8
SHA256

f73ec3a703714c23008ecabc54fe10b5368877c79e9ffa1d2847d351f688b99c
SHA512

efebe2e9016f8392a1811b061079598937e5660bd24e61e4a0b6414da0bb684b4a2a9c1ed07ecfadb57c419d3daf6d8e6b3dafcfa058f7af61db2e22b047c271
SSDEEP

3072:a3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVXI:aeGKDRAXb

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bf9044bc71935656d252d599d361670.bin

Files

6bf9044bc71935656d252d599d361670.bin
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ