redline | 03847699[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03847699.dmp
Size

192KB
MD5

0c0a92eb94fee4f5b49073f5ec5ee72c
SHA1

839aab9b5b89571a8b111ad36cc6751159ff7c29
SHA256

a49340203a9b1df2ab19b0c744b32ea474a26a365f6d1e4190794720d5a55522
SHA512

5a84eb60accb2b04ec028ae1a9104364e0785fe67c8b4df162a0c738377df80ff1524816947a28a115be7ab9bc719c37708d7a6290cf83bf7812f43b498ddb45
SSDEEP

3072:2BtDiwyqSVghBGfAGtTjxNKifvWPxnZ8e8hy:6ibuhM5ZmnPxnZ

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03847699.dmp

Files

03847699.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ