redline | 2140-54-0x0000000000F10000-0x0000000000FDF000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2140-54-0x0000000000F10000-0x0000000000FDF000-memory.dmp
Size

828KB
MD5

08ce4466ce1011d129891ef23a3db531
SHA1

3e2de582af89d3c7e9c05805c405bdf7502c7ea1
SHA256

237e2daa3bd33b7f9f27f1913c048312e980b6b7656241e432c7f481efa2522a
SHA512

e8517290052b16d8eb236b1b891e6e89f9fbf1ad2bf3d18e8e5c9c20dafddfd94f894ab6c93afa6e089753bf0cfeaa050168b766fdd79f03a9838c5f4ae5f9d5
SSDEEP

24576:RlHto1fMYqJQsnrW2sTNT82mIkUfWpnDY7eFI0uiD1aj:RlCMYqJQsWN3NWpDv1W

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2140-54-0x0000000000F10000-0x0000000000FDF000-memory.dmp

Files

2140-54-0x0000000000F10000-0x0000000000FDF000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LLK
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ