redline | 868-2296-0x00000000022F0000-0x0000000002322000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

868-2296-0x00000000022F0000-0x0000000002322000-memory.dmp
Size

200KB
MD5

df29a8091285d5aae8be1949f9303689
SHA1

b8b91f24c460d9f5613de5cf3a05e6154ca4181a
SHA256

8b025e5fa38b57e6980d5e4d39adf7f21c8741560afe4732a47132181339e46a
SHA512

ab43588a2afc966c2d2f8b63ee7047e86f6235569a3130b4700012acd08bc7bf10c3f485e154ab8e6aca6adba6e88bb03d59e561cb720ba552d95ea4b3878da1
SSDEEP

1536:pGwZMqlVZRGWat1rYol4k9GLr6ICTGqVKbuNiYfHk4Lq83wYk78e8h7frD:p7YIocLWI3qV+beHk4Lq58e8h7P

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

868-2296-0x00000000022F0000-0x0000000002322000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ