redline | 4892-163-0x0000000000400000-0x0000000000473000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4892-163-0x0000000000400000-0x0000000000473000-memory.dmp
Size

460KB
MD5

eca38d88522f89c769a8aa5441742bbf
SHA1

739cd7dc3edd8cb940bd2e754a97e40e5f67fea3
SHA256

71061ec611b4d3d46b53711a036bd2961c64d695f3b06e20404c97d7cb074c8b
SHA512

61a6e4bb482da4b9e210592dbb9d4d2063cdb2e753bf4308d7a908fdba072b2c9d8f8fa4227f154d98be825b77729eca39bbdd92b1daa0342665a726894da2fa
SSDEEP

12288:EX9EYy+D5a+snbZ6TEGfHO4l8cPV/7ryRb:EtEYy+D5sb

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

4892-163-0x0000000000400000-0x0000000000473000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 342KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ