redline | 1284-2286-0x0000000002590000-0x00000000025C2000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1284-2286-0x0000000002590000-0x00000000025C2000-memory.dmp
Size

200KB
MD5

29293842dc41c39cb2f0f52d4df8a579
SHA1

b0ca4fd9985f5263e598d21489525f87b62801a3
SHA256

4975397a8fce0e8fbfa02eeb27110872b5a9f8b5ee96c4ef9470671bb0f90b17
SHA512

dd2fe8c07b97f292acd6d7c146dd7452df21d0f44c391b7a15fd67f5b0eeb713a8fa81e565866daeac77c17d6f7c1d83e344013041a0df8773b614b589eeeee6
SSDEEP

1536:Dx56Ng2WBqlVZRGW8AAr3D09Vbo/ofhRmdicyTGqV8bumsbOwFcEND83wYkr8e8E:DXTLL0C/qV0aXFcENDd8e8h0d

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1284-2286-0x0000000002590000-0x00000000025C2000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ