Redline[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Redline.exe
Size

6.9MB
MD5

711b17c1f1f5155907f210e8592ccba6
SHA1

3ff3e70af9b8353ced6769b8077c259274c00324
SHA256

9d262aa6c3602d81ec06e740a1743d3436b04d03ac0744b8b214d7f7c75effa7
SHA512

c97548f389661015ba886145bc963206fd11d0aecd2dfb3e8d1ff943c1b8aa7a6e2ddb9a915a514469c172a1ac97cdf7ef379074a6d5b9625c55606a7a25bf14
SSDEEP

196608:TSrpFpEARqU31Dkhg/oJTqRcpvT3CT+ubFGc3hnSIH+HW7f:TS9ESqYmgy3fUAcJd+HO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Redline.exe

Files

Redline.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ