redline | b38730f83a695f62c697f11012058901[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b38730f83a695f62c697f11012058901.bin
Size

120KB
MD5

b38730f83a695f62c697f11012058901
SHA1

85ab7976f2a2e79fd1e87de8088fd8b1810681ed
SHA256

9a7e45bec7099fd4b20a7829a383ed8a9baeac889365cec58b6c12de415c5567
SHA512

7429365933ecd3276c1c6aa561f006ee18bc4edc5b260a88dcc2f37fd9d5f3e073805c1f43e012b8b98a0d9be535468c76db897b945da2519646fcaf71f5b026
SSDEEP

3072:P3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVR6:PeGKDRAX1

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b38730f83a695f62c697f11012058901.bin

Files

b38730f83a695f62c697f11012058901.bin
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ