redline | 2552-54-0x0000000000E80000-0x0000000000FFF000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2552-54-0x0000000000E80000-0x0000000000FFF000-memory.dmp
Size

1.5MB
MD5

f36665ab69a14fffb1b31a22d17c2f7a
SHA1

5ad76364858205fb1ab78e12303112d866bf07a8
SHA256

868caf2c97be36d8def1f197a79af36f624ec0d126dc7158164baf4f65bccc59
SHA512

8b82d573ea568e565784d0ae3765e5f444009238f77e1e2d903c04954c95535f6591f540f5c27f13a24576ecca1da5f3c125eb15f9b9e5dba1556a189c9cf910
SSDEEP

12288:4j9vxi5tgwl+8gwvJ38yYfCOS+vI78xTZKMUfu+r3kw+lvurWFUfxcZKivobb:Gxi5Swl+8gwvJ3CYMUW+gw+lNzvob

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2552-54-0x0000000000E80000-0x0000000000FFF000-memory.dmp

Files

2552-54-0x0000000000E80000-0x0000000000FFF000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Sa2day
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.hdffs2
Size: 589KB - Virtual size: 588KB

IMAGE_SCN_MEM_READ