redline | 2080-60-0x00000000067A0000-0x00000000067E0000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2080-60-0x00000000067A0000-0x00000000067E0000-memory.dmp
Size

256KB
MD5

8d0ecca98abc997832fa2c3ebc58141a
SHA1

de71f8f3eb9c4da49d49c937c53293de143844fe
SHA256

67a5ee58f6f5dbf2049144e46b9b5dd7a60741b4c18908271666dc903a5a246e
SHA512

e20111ea21e915720e92c208da46ea513feadfe5c75fad129ff6495024a58b72259b9a88551708fc6f357230812ee7427a5de93f063a6a419b0d25458a1e6f7a
SSDEEP

3072:RUqns695m5jVHLoE0B2BXkrmK7lw7Lo4+PnzL/8e8hQe:/ns6CjVHLK/laLozP

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2080-60-0x00000000067A0000-0x00000000067E0000-memory.dmp

Files

2080-60-0x00000000067A0000-0x00000000067E0000-memory.dmp
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ