redline | 1004-56-0x0000000004230000-0x0000000004268000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1004-56-0x0000000004230000-0x0000000004268000-memory.dmp
Size

224KB
MD5

ee7013b98f3e53e4ce9afcac6b5fdd0f
SHA1

bcb4480002ea583882953166f278a854720e4fa5
SHA256

d5b8abf5b123932393d6b5f362629d52b6c85082090f98fae51eab21037532ca
SHA512

31789aba3301212b212682197f044c49fb2511be8f8c5dc55b5b1a42c7a9880e2d4a5042050987f0619710e07e03ba28dcede1547a1126a557c5594badbc0eec
SSDEEP

3072:2T9D+ge5ExQQk6Cow/2TzrzzzzzzzzzzzzzzzzzzzzzzpnpXxpKDMlmXj4g5Kdrv:a9D+Wxe/ynoOz

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1004-56-0x0000000004230000-0x0000000004268000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ