redline | 2244-163-0x0000000004A60000-0x0000000004AAC000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2244-163-0x0000000004A60000-0x0000000004AAC000-memory.dmp
Size

304KB
MD5

08fa45605111cd2f9c1d9bf00a50701a
SHA1

dbe95f8c365db1b73dbfa580948c817854635750
SHA256

a112a0f917120f4576ee6d65c87ff6d3573b55b716954c502619bb7b57cb5318
SHA512

9eb8d60041ed8a6a21f145c0e193306c40c2572d313dcdd9cb53267d187e4dfc9c9be2b49558aee4acfb96bf30e7a0fa76f77c3e84dd7307baca062fc24115cd
SSDEEP

3072:jC8WKY8UhroneC0rxNJf3a9ywFU/I1pQsjKpfOB84egmDkrzpiu60:Wkne/nJf7wFgIpr85gmDOz

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

2244-163-0x0000000004A60000-0x0000000004AAC000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ