redline | 1768-56-0x00000000047D0000-0x0000000004810000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1768-56-0x00000000047D0000-0x0000000004810000-memory.dmp
Size

256KB
MD5

3e07d1198a627c7d052cc351bb707b5c
SHA1

59c45945069ef9ad5a4746d008f872c92d0c1412
SHA256

6bbba5e2d2fbbff63f6af96315e50561ce3391f1a97f4383ffd78696e62815b7
SHA512

b25b091defc34b7e2c34627cb971539627db85157f961097b13741c6505b4a71af51489a33d0b92064d20f413eb74f6dfc50e3a95ac41168247f576077c30968
SSDEEP

3072:X8e8hXYfhTbnmIIG+rqVkKtR9TTVR8e8hX:XpfND3ITetfTVR

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Files

1768-56-0x00000000047D0000-0x0000000004810000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ