redline | 03653199[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03653199.dmp
Size

192KB
MD5

af6b54756064b9a66152d516c0b30359
SHA1

bdf95487b026b8d7202c9566238a13eb1fd58fb6
SHA256

8bcc5b32442a3246be521458e0ef4d90b2cb39245a15c3fa7ff38bab13ef3f37
SHA512

74fbe0f9979b3081ef2d5278dfb4d1fd9d8918ec3e54bae366a9b9866358471d0cbb3edadb8e32c92f9122f23eb73e16a3392b9dcedf439eda057aeae81f1e3d
SSDEEP

3072:2TtDiwyqSVghBGfAGtTjxNKifvWPxnC8e8hy:cibuhM5ZmnPxnC

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03653199.dmp

Files

03653199.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ