redline | 1396-54-0x0000000004970000-0x00000000049BC000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1396-54-0x0000000004970000-0x00000000049BC000-memory.dmp
Size

304KB
MD5

f718ebfe2f1263756f489e0b9dabb34b
SHA1

73813c4d679901f0f04966ef6e47e4ff8cb53ed6
SHA256

f8b69b3f7a0b4d5c85be15f1157241c02f9b0820afbb8d79a4a3c914a087e917
SHA512

c6e913b76f5d56bd70c7a9b2e4bc62fdb630d7b9571e39402cbbb72af315502ec451146f88cac42c3a741f3a5eb1c99f32ba05c875bd33ff09edc23243b7b823
SSDEEP

3072:Z5Rgee9Xi9TliteoXIzXWiUO+owukpWcgP9ZGOK/zmAq1Y00uCdtUmCJPsjfbvuP:D2LX5ZXow9pC/lvQOz

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1396-54-0x0000000004970000-0x00000000049BC000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ