redline | 2000-54-0x0000000000020000-0x00000000000EF000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2000-54-0x0000000000020000-0x00000000000EF000-memory.dmp
Size

828KB
MD5

c9195175dc146ab79dfdf114eda965a9
SHA1

2bb76959fdb6f8faf089378498fa043ca59d65d0
SHA256

3506e0474de11a9c05ab20864a888612bd6fc7247b5ac42a2a657785f8500860
SHA512

3a2ed7e1c0a8eda9701393f4f5ae3940518ae4562162c1b5330ee032b0b68e9c2f19bd7dc7080458940709aece629bd7d5269726a64d02f481ed705fd2491c28
SSDEEP

24576:2HIs/eE/TmbFGJbXrKUoq7U1DEyFo37NI0fqcRF:2HdTmbFGJzrK9D1oqcv

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2000-54-0x0000000000020000-0x00000000000EF000-memory.dmp

Files

2000-54-0x0000000000020000-0x00000000000EF000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 522KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LLK
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ