redline | 1672-2306-0x00000000009A0000-0x00000000009D2000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1672-2306-0x00000000009A0000-0x00000000009D2000-memory.dmp
Size

200KB
MD5

e687e783b69314ca750c804937b47247
SHA1

c539749c884e9dadc34064984258972f03b07c93
SHA256

63459eee82fa537214adfb7adb18c4cce9cb3b074760232851ba4934071f846c
SHA512

b25a91d9ae3f9423eb8e005ee449976beee03944d2f44eb3f8244a567d4093da8c4871d6a1ab59ced17c84e46d811acc4f4b16b80f39920df75aa9b7a317396a
SSDEEP

1536:pGwZMqlVZRGWat1rYol4k9GLr6ICTGqVKbuNiYfHk4Lq83wYk78e8h7z:p7YIocLWI3qV+beHk4Lq58e8h7z

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1672-2306-0x00000000009A0000-0x00000000009D2000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ