redline | 1724-55-0x00000000003B0000-0x00000000003E0000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1724-55-0x00000000003B0000-0x00000000003E0000-memory.dmp
Size

192KB
MD5

20911bb83d39e6ac2ac30a1924096f6f
SHA1

abd069fea67fb451ce58a2b447db2bac167dd827
SHA256

db9a9073b9b824ac8eab7da4a40ec8526f4854c718f03e0b8102aca03cfab3e2
SHA512

b225c139b6bbe53e90f29e9a5fcb5a5fae4d932440510f4b0cf33e679f318ffd61cb2c41e2f1b21b3d00666b6cad39dd4607229f5ac233955cd8b345de1fb72b
SSDEEP

3072:aiZj2pBRmtrAqZU3rVb0Eo4AIwRhSoLY/G8e8hpW:Jj2Yw3rVQRhSoLYu

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1724-55-0x00000000003B0000-0x00000000003E0000-memory.dmp

Files

1724-55-0x00000000003B0000-0x00000000003E0000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ