redline | 1808-54-0x00000000047E0000-0x000000000482A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1808-54-0x00000000047E0000-0x000000000482A000-memory.dmp
Size

296KB
MD5

6961781d7da118b9505964bbfc9f8f0f
SHA1

a587bba262030b16e3a82863d9a336b86bbd2378
SHA256

1750bdf56656f0a0b2fa51d49873daae96ea6172048ccf6627992710ca1bce87
SHA512

d6846a52792a8ebdbb5c6bb1435b3de884df9bdd2e89e33d23f1c369fc4499e2df25468d291c26a4fd4d42a16fd83e97588139f04665dcf5182b197595af332c
SSDEEP

3072:JEEO/1O4QG167hvzE4LOWasx3QV8jpd5VQiNB/IgsjNGwRHpnbRY6cnEYx0:3S4LOWamQQOpbu/E

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1808-54-0x00000000047E0000-0x000000000482A000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ